In short
- CVE-2018-18260 is a MEDIUM (CVSS 6.1) vulnerability affecting camaleon_cms, camaleon cms (tuzitio).
- Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 64.3% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
In the 2.4 version of Camaleon CMS, Stored XSS has been discovered. The profile image in the User settings section can be run in the update / upload area via /admin/media/upload?actions=false.
NVD description
In the 2.4 version of Camaleon CMS, Stored XSS has been discovered. The profile image in the User settings section can be run in the update / upload area via /admin/media/upload?actions=false. NOTE: the vendor reports that they are "unable to reproduce the reported issue on any version."
More vulnerabilities in camaleon_cms
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free