Vulnerabilities > Lepton CMS > Leptoncms > 4.7.0

DATE CVE VULNERABILITY TITLE RISK
2023-08-11 CVE-2020-24872 Cross-site Scripting vulnerability in Lepton-Cms Leptoncms 4.7.0
Cross Site Scripting (XSS) vulnerability in backend/pages/modify.php in Lepton-CMS version 4.7.0, allows remote attackers to execute arbitrary code.
network
low complexity
lepton-cms CWE-79
6.1
6.1
2020-12-02 CVE-2020-29240 Cross-site Scripting vulnerability in Lepton-Cms Leptoncms 4.7.0
Lepton-CMS 4.7.0 is affected by cross-site scripting (XSS).
network
lepton-cms CWE-79
3.5
3.5