{"action":"Upgrade camaleon_cms to 2.8.1 or later.","affected":[{"fixed":"2.8.1","introduced":"0"}],"component":"camaleon_cms","cve_ids":[],"ecosystem":"RubyGems","exploited":false,"fixed_versions":["2.8.1"],"ghsa_id":"GHSA-r9cr-qmfw-pmrc","id":"tcs_01M5KEN83S992JTRCWS4ADH0ZB","modified_at":"2024-11-28T05:50:43.506173Z","published_at":"2024-09-18T15:47:01Z","references":["https://osv.dev/vulnerability/GHSA-r9cr-qmfw-pmrc","https://github.com/owen2345/camaleon-cms/security/advisories/GHSA-r9cr-qmfw-pmrc","https://github.com/owen2345/camaleon-cms/commit/b18fbc74f3ecd98a1f781d015f5466ef16b1425b","https://github.com/owen2345/camaleon-cms"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-r9cr-qmfw-pmrc","url":"https://osv.dev/vulnerability/GHSA-r9cr-qmfw-pmrc"}],"summary":"Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184)"}