Vendor
tuzitio
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 4.8
Cameleon CMS 2.7.4 Authenticated Persistent Cross-Site Scripting via Post Creation
Cameleon CMS 2.7.4 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts into post titles. Attackers can create posts with embedded SVG scripts that execute when other users mouse over th…