RubyGems/camaleon_cms

Camaleon CMS Insufficient Session Expiration vulnerability

Modified: 11/8/2023

Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184)

Modified: 12/5/2024

Camaleon CMS vulnerable to Stored Cross-site Scripting

Modified: 11/8/2023

Camaleon CMS vulnerable to remote code execution through code injection (GHSL-2024-185)

Modified: 5/23/2025

Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184)

Modified: 12/3/2024

Camaleon CMS vulnerable to arbitrary path traversal (GHSL-2024-183)

Modified: 4/17/2025

camaleon_cms affected by cross site scripting

Modified: 10/24/2024

Camaleon CMS vulnerable to Path Traversal through AWS S3 uploader implementation

Modified: 5/5/2026

Camaleon CMS vulnerable to Uncaught Exception

Modified: 11/8/2023

Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184)

Modified: 11/28/2024

Camaleon CMS Vulnerable to Privilege Escalation through a Mass Assignment

Modified: 3/19/2025

Camaleon CMS vulnerable to Server-Side Request Forgery

Modified: 11/8/2023

Camaleon CMS affected by arbitrary file write to RCE (GHSL-2024-182)

Modified: 4/17/2025

Server-Side Template Injection in Camaleon CMS

Modified: 2/16/2024

Camaleon CMS Stored Cross-site Scripting vulnerability

Modified: 11/8/2023