CA
Product
CamaleonCMS
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 3Low 0
Watch
Add CamaleonCMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-56721 | 8.8 | Aug 11 | CamaleonCMS 2.9.2 Privilege Escalation via Parameter Confusion in UsersController Affected: through 2.9.2 |
| CVE-2026-73332 | 8.7 | Aug 12 | CamaleonCMS cama_contact_form Plugin Stored XSS via before_html Field Affected: through 2.9.1 |
| CVE-2026-73329 | 8.7 | Aug 12 | CamaleonCMS Stored XSS via Draft Post Title Creation Endpoint Affected: through 2.9.1 |
| CVE-2026-73326 | 7.6 | Aug 12 | CamaleonCMS Missing Authorization via Plugin Administration Endpoints Affected: through 2.9.1 |
| CVE-2026-73331 | 7.1 | Aug 12 | CamaleonCMS 2.9.1 Authenticated SQL Injection via Post Slug Field Affected: through 2.9.1 |
| CVE-2026-73330 | 6.6 | Aug 12 | CamaleonCMS 2.9.1 Server-Side Template Injection via test_email Action Affected: through 2.9.1 |
| CVE-2026-86100 | 6.4 | Sep 4 | Camaleon CMS 2.7.5 through 2.9.1 SSRF via HTTP Redirect in Upload from URL Affected: 2.7.5 before 2.9.2 |
| CVE-2026-56720 | 4.3 | Aug 11 | CamaleonCMS 2.9.2 and earlier Missing Authorization via profile Action Affected: through 2.9.2 |
Showing 8