Moderate severityNVD Advisory· Published Oct 15, 2018· Updated Aug 5, 2024

CVE-2018-18260

Description

In the 2.4 version of Camaleon CMS, Stored XSS has been discovered. The profile image in the User settings section can be run in the update / upload area via /admin/media/upload?actions=false. NOTE: the vendor reports that they are "unable to reproduce the reported issue on any version."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

ghsa-coords
pkg:gem/camaleon_cms

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-7f84-9cqf-g4j9ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-18260ghsaADVISORY
packetstormsecurity.com/files/149772/CAMALEON-CMS-2.4-Cross-Site-Scripting.htmlghsaWEB
github.com/rubysec/ruby-advisory-db/blob/master/gems/camaleon_cms/CVE-2018-18260.ymlghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000