EIP-2026-114694

This exploit demonstrates a stored XSS vulnerability in CAMALEON CMS 2.4 by uploading a malicious file with an embedded JavaScript payload in the filename. The payload executes when the file is accessed or displayed in the admin interface.