Camaleon CMS

Products

ProductCVEsExploitedLatest
Camaleon CMS5–Jun 12, 2026

Exploited and recent CVEs

  • CVE-2026-10715 Medium 5.1 Camaleon CMS 2.9.2 - Improper authorization in draft autosave endpoint 0.2%
  • CVE-2021-25972 Medium 4.9 Camaleon CMS - Server-Side Request Forgery (SSRF) in Media Upload Feature 1.0%
  • CVE-2021-25971 Medium 4.3 Camaleon CMS - SVG File Upload Creates DoS for Media Upload Feature 1.0%
  • CVE-2021-25970 High 8.8 Camaleon CMS - Insufficient Session Expiration after Password Change 1.3%
  • CVE-2021-25969 Medium 6.1 Camaleon CMS - Stored Cross-Site Scripting (XSS) in Comments 0.8%