Product
Camaleon CMS versions prior to 2.9.2 contain an authorization bypass vulnerability allowing low-privileged users to perform unauthorized file operations and modify user avatars.