CVE-2023-53936
Cameleon CMS 2.7.4 Authenticated Persistent Cross-Site Scripting via Post Creation
Summary
Cameleon CMS 2.7.4 Authenticated Persistent Cross-Site Scripting via Post Creation
Original description
The description as published by the source.
Cameleon CMS 2.7.4 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts into post titles. Attackers can create posts with embedded SVG scripts that execute when other users mouse over the post title, potentially stealing session cookies and executing arbitrary JavaScript.
References
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- package github.com
- report exploit-db.com