{"action":"Upgrade camaleon_cms to 2.8.1 or later.","affected":[{"fixed":"2.8.1","introduced":"0"}],"component":"camaleon_cms","cve_ids":[],"ecosystem":"RubyGems","exploited":false,"fixed_versions":["2.8.1"],"ghsa_id":"GHSA-8fx8-3rg2-79xw","id":"tcs_01M5KEJ1HNHAAZ9YBXBD8T4GYG","modified_at":"2024-12-03T06:09:09.835007Z","published_at":"2024-09-23T22:10:33Z","references":["https://osv.dev/vulnerability/GHSA-8fx8-3rg2-79xw","https://github.com/owen2345/camaleon-cms/security/advisories/GHSA-r9cr-qmfw-pmrc","https://github.com/owen2345/camaleon-cms","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/camaleon_cms/GHSA-r9cr-qmfw-pmrc.yml"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-8fx8-3rg2-79xw","url":"https://osv.dev/vulnerability/GHSA-8fx8-3rg2-79xw"}],"summary":"Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184)"}