Filtered by vendor Lepton-cms Subscriptions
Filtered by product Leptoncms Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-24399 1 Lepton-cms 1 Leptoncms 2024-06-07 7.2 High
An arbitrary file upload vulnerability in LEPTON v7.0.0 allows authenticated attackers to execute arbitrary PHP code by uploading this code to the backend/languages/index.php languages area.
CVE-2020-24872 1 Lepton-cms 1 Leptoncms 2023-08-16 6.1 Medium
Cross Site Scripting (XSS) vulnerability in backend/pages/modify.php in Lepton-CMS version 4.7.0, allows remote attackers to execute arbitrary code.
CVE-2020-29240 1 Lepton-cms 1 Leptoncms 2020-12-02 4.8 Medium
Lepton-CMS 4.7.0 is affected by cross-site scripting (XSS). An attacker can inject the XSS payload in the URL field of the admin page and each time an admin visits the Menu-Pages-Pages Overview section, the XSS will be triggered.
CVE-2020-12705 1 Lepton-cms 1 Leptoncms 2020-05-08 6.1 Medium
Multiple cross-site scripting (XSS) vulnerabilities exist in LeptonCMS before 4.6.0.