https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T11:29:18.342008+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-21178 cnvd-2018-21178 2026-10-07T11:29:18.345147+00:00 cnvd-2018-21178 https://cve.radiocsirt.org/vuln/euvd-2026-69057 EUVD-2026-69057 2026-10-07T11:29:18.345178+00:00 EUVD-2026-69057 https://cve.radiocsirt.org/vuln/fkie_cve-2018-18260 fkie_cve-2018-18260 2026-10-07T11:29:18.345193+00:00

In the 2.4 version of Camaleon CMS, Stored XSS has been discovered. The profile image in the User settings section can be run in the update / upload area via /admin/media/upload?actions=false. NOTE: the vendor reports that they are "unable to reproduce the reported issue on any version."

 https://cve.radiocsirt.org/vuln/ghsa-7f84-9cqf-g4j9 GHSA-7f84-9cqf-g4j9 — Camaleon CMS vulnerable to Stored Cross-site Scripting 2026-10-07T11:29:18.345222+00:00

Affected: RubyGems: camaleon_cms

In the 2.4 version of Camaleon CMS, Stored XSS has been discovered. The profile image in the User settings section can be run in the update / upload area via `/admin/media/upload?actions=false`.

 https://cve.radiocsirt.org/vuln/gsd-2018-18260 gsd-2018-18260 2026-10-07T11:29:18.345245+00:00 gsd-2018-18260