Product
An authenticated stored cross-site scripting vulnerability in the CamaleonCMS cama_contact_form plugin allows attackers to inject malicious HTML and JavaScript, enabling session takeover and unauthorized administrative actions.