tuzitio Vulnerabilities and Affected Products
Vulnerabilities associated with Cameleon CMS.
Products
Clear product- camaleon_cms3 vulnerabilities
- Cameleon CMS1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-53936MEDIUM | Cameleon CMS 2.7.4 Authenticated Persistent Cross-Site Scripting via Post CreationCameleon CMS 2.7.4 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts into post titles. Attackers can create posts with embedded SVG scripts that execute when other users mouse over the post title, potentially stealing session cookies and executing arbitrary JavaScript. CWE-79Dec 18, 2025 | CVSS5.1v4.0 | EPSS0.217% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |