What’s Vulnerable › Products

owen2345 CamaleonCMS vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your owen2345 CamaleonCMS version is affected

Latest owen2345 CamaleonCMS vulnerabilities

• CVE-2026-86100 — Camaleon CMS 2.7.5 through 2.9.1 SSRF via HTTP Redirect in Upload from URL (CVSS 6.4)
• CVE-2026-73332 — CamaleonCMS cama_contact_form Plugin Stored XSS via before_html Field (CVSS 8.7)
• CVE-2026-73331 — CamaleonCMS 2.9.1 Authenticated SQL Injection via Post Slug Field (CVSS 7.1)
• CVE-2026-73330 — CamaleonCMS 2.9.1 Server-Side Template Injection via test_email Action (CVSS 6.6)
• CVE-2026-73329 — CamaleonCMS Stored XSS via Draft Post Title Creation Endpoint (CVSS 8.7)
• CVE-2026-73326 — CamaleonCMS Missing Authorization via Plugin Administration Endpoints (CVSS 7.6)
• CVE-2026-56721 — CamaleonCMS 2.9.2 Privilege Escalation via Parameter Confusion in UsersController (CVSS 8.8)
• CVE-2026-56720 — CamaleonCMS 2.9.2 and earlier Missing Authorization via profile Action (CVSS 4.3)