Lucene search
+L

7 matches found

Kitploit
Kitploit
•added 2026/10/23 4:20 p.m.•18 views

CVE-2024-48652

CVE-2024-48652 Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the content group name field Steps to Reproduce: 1.Open the URL: http://127.0.0.1/admin/dashboard 2.Log in using admin credentials. 3.Navigate to the "Settings" section...

4.8CVSS6.8AI score0.01115EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2024/10/23 12:31 a.m.•28 views

camaleon_cms affected by cross site scripting

Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the content group name field...

4.8CVSS7.3AI score0.01115EPSS
SaveExploits1References4Affected Software1
osv_cve
osv_cve
•added 2024/10/22 12:00 a.m.•24 views

CVE-2024-48652

Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the content group name field...

4.8CVSS7.5AI score
SaveExploits0References3
Mend
Mend
•added 2024/10/22 12:00 a.m.•6 views

CVE-2024-48652

Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the content group name field...

4.8CVSS0.01115EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2024/10/22 12:00 a.m.•16 views

CamaleonCMS cross-site scripting vulnerabilities

CamaleonCMS is an advanced RubyonRails-based dynamic content management system CMS from the CamaleonCMS team. A security vulnerability exists in CamaleonCMS version v2.7.5, which stems from the presence of a cross-site scripting vulnerability that allows remote attackers to execute arbitrary code...

4.8CVSS7AI score0.01115EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/22 12:00 a.m.•4 views

CVE-2024-48652: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the content group name field...

4.8CVSS6.6AI score0.01115EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/10/19 12:00 a.m.•16 views

PT-2024-33173 · Unknown · Camaleon Cms

Name of the Vulnerable Software and Affected Versions: camaleon-cms version 2.7.5 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the content group name field. Recommendations: For camaleon-cms version 2.7.5, update to a version that fixes this iss...

4.8CVSS7.6AI score0.01115EPSS
SaveExploits1References9
Rows per page
Query Builder