{"action":"Upgrade camaleon_cms to 2.8.2 or later.","affected":[{"fixed":"2.8.2","introduced":"2.8.0"}],"component":"camaleon_cms","cve_ids":[],"ecosystem":"RubyGems","exploited":false,"fixed_versions":["2.8.2"],"ghsa_id":"GHSA-75j2-9gmc-m855","id":"tcs_01M5KEHJ7F4C4QGYRKEA51MCZS","modified_at":"2024-12-05T05:39:56.339159Z","published_at":"2024-09-25T21:53:27Z","references":["https://osv.dev/vulnerability/GHSA-75j2-9gmc-m855","https://github.com/owen2345/camaleon-cms/security/advisories/GHSA-r9cr-qmfw-pmrc","https://github.com/owen2345/camaleon-cms","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/camaleon_cms/GHSA-8fx8-3rg2-79xw.yml"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-75j2-9gmc-m855","url":"https://osv.dev/vulnerability/GHSA-75j2-9gmc-m855"}],"summary":"Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184)"}