owen2345 vulnerabilities

CVEs per yearBy the year they were published

1. 20242
2. 20251
3. 202615

Newest CVEs

• CVE-2026-120430

  Camaleon CMS before 2.9.2 IDOR via Admin::CategoriesController

  owen2345 · Camaleon CMS

  Medium5.3
• CVE-2026-120429

  Camaleon CMS before 2.9.2 Missing Authorization via Admin::MediaController

  owen2345 · Camaleon CMS

  High7.1
• CVE-2026-116009

  Camaleon CMS before 2.9.3 Path Traversal RCE via Media crop_url Action

  owen2345 · camaleon-cms

  High8.7
• CVE-2026-102261

  owen2345 Camaleon CMS Media Crop media_controller.rb crop authorization

  owen2345 · Camaleon CMS

  Medium5.3
• CVE-2026-86100

  Camaleon CMS 2.7.5 through 2.9.1 SSRF via HTTP Redirect in Upload from URL

  owen2345 · CamaleonCMS

  Medium5.3
• CVE-2026-73326

  CamaleonCMS Missing Authorization via Plugin Administration Endpoints

  owen2345 · CamaleonCMS

  High7.2
• CVE-2026-73332

  CamaleonCMS cama_contact_form Plugin Stored XSS via before_html Field

  owen2345 · CamaleonCMS

  Critical9.2
• CVE-2026-73331

  CamaleonCMS 2.9.1 Authenticated SQL Injection via Post Slug Field

  owen2345 · CamaleonCMS

  High7.1
• CVE-2026-73330

  CamaleonCMS 2.9.1 Server-Side Template Injection via test_email Action

  owen2345 · CamaleonCMS

  High7.5
• CVE-2026-73329

  CamaleonCMS Stored XSS via Draft Post Title Creation Endpoint

  owen2345 · CamaleonCMS

  Critical9.2