High
Camaleon CMS before 2.9.3 Path Traversal RCE via Media crop_url Action
Type: advisorySource: Official CVE List
Camaleon CMS before 2.9.3 contains a path traversal vulnerability that allows users with only the media permission to write arbitrary files by supplying ../ sequences in the name parameter. Attackers can send a base64…
Products: camaleon-cmsCVEs: CVE-2026-116009