MEDIUM6.1
GHSA-7f84-9cqf-g4j9
Camaleon CMS vulnerable to Stored Cross-site Scripting
Details
In the 2.4 version of Camaleon CMS, Stored XSS has been discovered. The profile image in the User settings section can be run in the update / upload area via `/admin/media/upload?actions=false`.
Are you affected?
Enter the version of the package you're using.
Affected packages
RubyGems/camaleon_cms
No fixed version published yet for camaleon_cms (bundler). Pin to a known-safe version or switch to an alternative.