Skip to content
OpenAdvisories

Vendor

tuzitio

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 4.8

    Cameleon CMS 2.7.4 Authenticated Persistent Cross-Site Scripting via Post Creation

    Cameleon CMS 2.7.4 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts into post titles. Attackers can create posts with embedded SVG scripts that execute when other users mouse over th…