owen2345 CamaleonCMS

• CVE-2026-86100 Medium 6.4 Camaleon CMS 2.7.5 through 2.9.1 SSRF via HTTP Redirect in Upload from URL 0.3%
• CVE-2026-73326 High 7.6 CamaleonCMS Missing Authorization via Plugin Administration Endpoints 0.4%
• CVE-2026-73332 High 8.7 CamaleonCMS cama_contact_form Plugin Stored XSS via before_html Field 0.4%
• CVE-2026-73331 High 7.1 CamaleonCMS 2.9.1 Authenticated SQL Injection via Post Slug Field 0.4%
• CVE-2026-73330 Medium 6.6 CamaleonCMS 2.9.1 Server-Side Template Injection via test_email Action 0.8%
• CVE-2026-73329 High 8.7 CamaleonCMS Stored XSS via Draft Post Title Creation Endpoint 0.4%
• CVE-2026-56721 High 8.8 CamaleonCMS 2.9.2 Privilege Escalation via Parameter Confusion in UsersController 0.5%
• CVE-2026-56720 Medium 4.3 CamaleonCMS 2.9.2 and earlier Missing Authorization via profile Action 0.3%