CVE-2024-48652 - Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the content group name field

MEDIUM

Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the content group name field

Published Oct 22, 2024

4.8

MEDIUM

CVSS 4.0

EPSS 1.11%

Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the content group name field.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
2.7.5	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://github.com/advisories/GHSA-hhxg-rvc9-8726		Advisory
https://github.com/paragbagul111/CVE-2024-48652		ExploitThird Party Advisory
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/camaleon_cms/CVE-2024-48652.yml
https://nvd.nist.gov/vuln/detail/CVE-2024-48652