diff --git a/gems/camaleon_cms/CVE-2024-48652.yml b/gems/camaleon_cms/CVE-2024-48652.yml
index 4c4d2c2a1c..4d81873807 100644
--- a/gems/camaleon_cms/CVE-2024-48652.yml
+++ b/gems/camaleon_cms/CVE-2024-48652.yml
@@ -10,6 +10,7 @@ description: |
   remote attacker to execute arbitrary code via the content group
   name field.
 cvss_v3: 4.8
+cvss_v4: 4.8
 patched_versions:
   - ">= 2.8.0"
 related:
@@ -25,4 +26,5 @@ related:
     - https://github.com/advisories/GHSA-hhxg-rvc9-8726
 notes: |
   - cvss_v3 from nvd.nist.gov URL
+  - cvss_v3 from GHSA URL
   - PR#1075 mentions "content groups"