Skip to contentTuzitio Camaleon Cms vulnerabilities
- owen2345 camaleon cmsCamaleon CMS AWS Uploader Authenticated Path Traversal Arbitrary File ReadCVE-2026-17766.0 Medium
- tuzitio cameleon cms, camaleon cms +1 moreCameleon CMS 2.7.4 Authenticated Persistent Cross-Site Scripting via Post CreationCVE-2023-539365.1 Medium
- tuzitio camaleon cmscamaleon_cms affected by cross site scriptingCVE-2024-48652Public exploit4.8 Medium
- tuzitio camaleon cms, owen2345 camaleon-cms +1 moreArbitrary path traversal in Camaleon CMSCVE-2024-46987Public exploitFix availableEPSS 14.6%7.7 High
- tuzitio camaleon cms, owen2345 camaleon-cms +1 moreArbitrary file write leading to RCE in Camaleon CMSCVE-2024-46986Public exploitFix availableEPSS 37.1%10.0 Critical
- tuzitio camaleon cmsServer-Side Template Injection in Camaleon CMSCVE-2023-30145Public exploitFix availableEPSS 45.9%9.8 Critical
- camaleon cms cms, tuzitio camaleon cms +1 moreCamaleon CMS - Server-Side Request Forgery (SSRF) in Media Upload FeatureCVE-2021-25972Fix available4.9 Medium
- camaleon cms cms, tuzitio camaleon cms +1 moreCamaleon CMS - SVG File Upload Creates DoS for Media Upload FeatureCVE-2021-25971Fix available4.3 Medium
- camaleon cms cms, tuzitio camaleon cms +1 moreCamaleon CMS - Insufficient Session Expiration after Password ChangeCVE-2021-25970Fix available8.8 High
- camaleon cms cms, tuzitio camaleon cms +1 moreCamaleon CMS - Stored Cross-Site Scripting (XSS) in CommentsCVE-2021-25969Fix available6.1 Medium
- tuzitio camaleon cmsCamaleon CMS vulnerable to Stored Cross-site ScriptingCVE-2018-18260Disputed6.1 Medium