camaleon_cms affected by cross site scripting

Description

References

• nvd.nist.gov/vuln/detail/CVE-2024-48652 · ADVISORY
• owen2345/camaleon-cms · PACKAGE
• paragbagul111/CVE-2024-48652 · WEB
• rubysec/ruby-advisory-db · WEB
• paragbagul111/CVE-2024-48652 · Exploit

Mais vulnerabilidades de camaleon_cms

• CVE-2026-1776MÉDIO 6.5Camaleon CMS versions 2.4.5.0 through 2.9.0, prior to commit f54a77e, contain a path traversal vulnerability in the AWS S3 uploader implemen…
• CVE-2025-2304CRÍTICO 9.4A Privilege Escalation through a Mass Assignment exists in Camaleon CMS When a user wishes to change his password, the 'updated_ajax' metho…
• GHSA-75j2-9gmc-m855MÉDIO 5.4Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184)
• GHSA-8fx8-3rg2-79xwMÉDIO 5.4Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184)
• CVE-2024-46987ALTO 7.7Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via Media…