What’s Vulnerable › Products

owen2345 camaleon-cms vulnerabilities

16 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your owen2345 camaleon-cms version is affected

Latest owen2345 camaleon-cms vulnerabilities

• CVE-2026-116009 — Camaleon CMS before 2.9.3 Path Traversal RCE via Media crop_url Action (CVSS 8.8)
• CVE-2026-102261 — owen2345 Camaleon CMS Media Crop media_controller.rb crop authorization (CVSS 5.4)
• CVE-2026-67616 — Camaleon CMS 2.9.2 Missing Authorization via /admin/post_type drafts endpoint (CVSS 4.3)
• CVE-2026-66748 — Camaleon CMS 2.1.1 - 2.9.1 Authenticated RCE via select_eval Custom Field (CVSS 8.8)
• CVE-2026-10715 — Camaleon CMS 2.9.2 - Improper authorization in draft autosave endpoint (CVSS 5.1)
• CVE-2026-1776 — Camaleon CMS AWS Uploader Authenticated Path Traversal Arbitrary File Read (CVSS 6.5)
• CVE-2023-53936 — Cameleon CMS 2.7.4 Authenticated Persistent Cross-Site Scripting via Post Creation (CVSS 4.8)
• CVE-2024-48652 — (CVSS 4.8)
• CVE-2024-46987 — Arbitrary path traversal in Camaleon CMS (CVSS 7.7)
• CVE-2024-46986 — Arbitrary file write leading to RCE in Camaleon CMS (CVSS 9.9)
• CVE-2023-30145 — (CVSS 9.8)
• CVE-2021-25972 — Camaleon CMS - Server-Side Request Forgery (SSRF) in Media Upload Feature (CVSS 4.9)
• CVE-2021-25971 — Camaleon CMS - SVG File Upload Creates DoS for Media Upload Feature (CVSS 4.3)
• CVE-2021-25970 — Camaleon CMS - Insufficient Session Expiration after Password Change (CVSS 8.8)
• CVE-2021-25969 — Camaleon CMS - Stored Cross-Site Scripting (XSS) in Comments (CVSS 6.1)
• CVE-2018-18260 — (CVSS 6.1)