CVE-2026-73329

creationtimestamp| type| source ---|---|--- 2026-08-12 21:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msvzkwpdwy2l 2026-08-12 22:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msw5ynadli2y...

CVE-2026-73329 CamaleonCMS Stored XSS via Draft Post Title Creation Endpoint

CamaleonCMS contains a stored cross-site scripting vulnerability that allows authenticated low-privileged users to execute arbitrary JavaScript in an administrator's browser by injecting unsanitized HTML payloads into the post title parameter during draft creation. Attackers can submit a maliciou...