Session Fixation

camaleon_cms is vulnerable to session fixation. Even after the password is changed, the library does not terminate the user’s active session, allowing a malicious user to gain unauthorized access to the application.