Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7605
HistoryOct 15, 2018 - 5:38 a.m.

Cross-Site Scripting (XSS)

2018-10-1505:38:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

EPSS

0.001

Percentile

26.5%

camaleon_cms is vulnerable to cross-site scripting. Files uploaded via the media uploader are not validated. This allows a remote attacker to inject arbitrary Javascript into a victim’s browser via the filename parameter.

EPSS

0.001

Percentile

26.5%