Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2021-25969

Description

In Camaleon CMS application, versions 0.0.1 to 2.6.0 are vulnerable to stored XSS, that allows an unauthenticated attacker to store malicious scripts in the comments section of the post. These scripts are executed in a victim’s browser when they open the page containing the malicious comment.

POC

Reference

- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25969

Github

- https://github.com/ARPSyndicate/cvemon

- https://github.com/ChamalBandara/CVEs