CVE-2021-25971: Tuzitio Camaleon CMS

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

In Camaleon CMS, versions 2.0.1 to 2.6.0 are vulnerable to an Uncaught Exception. The app's media upload feature crashes permanently when an attacker with a low privileged access uploads a specially crafted .svg file

Affected products

• Tuzitio Camaleon CMS: from 2.0.1, up to and including 2.6.0

Published 2021-10-20. Last modified 2026-06-17.