Known Vulnerabilities for products from Lepton-cms
Listed below are 11 of the newest known vulnerabilities associated with the vendor "Lepton-cms".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2025-56704 json | LeptonCMS version 7.3.0 contains an arbitrary file upload vulnerability, which is caused by the lack of proper validation for... | Not Provided | 2025-12-09 | 2026-07-05 |
| CVE-2024-24520 json | An issue in Lepton CMS v.7.0.0 allows a local attacker to execute arbitrary code via the upgrade.php file in the languages pl... | Not Provided | 2024-03-21 | 2026-07-09 |
| CVE-2024-24399 json | 7.2 - HIGH | 2024-01-25 | 2024-04-01 | |
| CVE-2020-29240 json | Lepton-CMS 4.7.0 is affected by cross-site scripting (XSS). An attacker can inject the XSS payload in the URL field of the ad... | 4.8 - MEDIUM | 2020-12-02 | 2020-12-02 |
| CVE-2020-24872 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 6.1 - MEDIUM | 2023-08-11 | 2023-08-16 |
| CVE-2020-12707 json | An XSS vulnerability exists in modules/wysiwyg/save.php of LeptonCMS 4.5.0. This can be exploited because the only security m... | 6.1 - MEDIUM | 2020-05-07 | 2020-05-08 |
| CVE-2020-12705 json | Multiple cross-site scripting (XSS) vulnerabilities exist in LeptonCMS before 4.6.0. | 6.1 - MEDIUM | 2020-05-07 | 2020-05-08 |
| CVE-2012-1000 json | Multiple cross-site scripting (XSS) vulnerabilities in LEPTON 1.1.3 and other versions before 1.1.4 allow remote attackers to... | Not Provided | 2012-02-24 | 2026-04-29 |
| CVE-2012-0999 json | SQL injection vulnerability in modules/news/rss.php in LEPTON before 1.1.4 allows remote attackers to execute arbitrary SQL c... | Not Provided | 2012-02-24 | 2026-04-29 |
| CVE-2012-0998 json | Directory traversal vulnerability in account/preferences.php in LEPTON before 1.1.4 allows remote attackers to include and ex... | Not Provided | 2012-02-24 | 2026-04-29 |
| CVE-2011-3385 json | Cross-site scripting (XSS) vulnerability in WebsiteBaker before 2.8, as used in LEPTON and possibly other products, allows re... | Not Provided | 2011-09-02 | 2026-04-29 |
Known software with vulnerabilities from Lepton-cms
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Lepton-cms | Lepton | 1.1.0 |
| Application | Lepton-cms | Leptoncms | - |
| Application | Lepton-cms | Lepton Cms | 4.5.0 |