CVE-2018-18260

In the 2.4 version of Camaleon CMS, Stored XSS has been discovered

published October 15, 2018

CVSS
—
EPSS
1%
Percentile
63.9
In the wild
Unconfirmed
What it is

In the 2.4 version of Camaleon CMS, Stored XSS has been discovered. The profile image in the User settings section can be run in the update / upload area via /admin/media/upload?actions=false. NOTE: the vendor reports that they are "unable to reproduce the reported issue on any version."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01049 · 63.9th percentile
Published
2018-10-15T00:00Z
EPSS history
Timeline
  • 15 OCT 00:00Z
    In the 2.4 version of Camaleon CMS, Stored XSS has been discovered
    cvelistv5