cbcvebase.

Lepton-Cms Lepton Cms vulnerabilities

1 known vulnerability affecting lepton-cms/lepton_cms.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2020-12707P4MEDIUMCVSS 6.1PoCv4.5.02020-05-07
CVE-2020-12707 [MEDIUM] CWE-79 CVE-2020-12707: An XSS vulnerability exists in modules/wysiwyg/save.php of LeptonCMS 4.5.0. This can be exploited be An XSS vulnerability exists in modules/wysiwyg/save.php of LeptonCMS 4.5.0. This can be exploited because the only security measure used against XSS is the stripping of SCRIPT elements. A malicious actor can use HTML event handlers to run JavaScript instead of using SCRIPT elements.
nvd
Lepton-Cms Lepton Cms vulnerabilities | cvebase