Lepton-cms vulnerabilities
We track 3 vulnerabilities in Lepton-cms products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 9, 2025.
Latest Lepton-cms vulnerabilities
- 8.8 High severity
Leptoncms: Unrestricted Upload of File with Dangerous Type
LeptonCMS version 7.3.0 contains an arbitrary file upload vulnerability, which is caused by the lack of proper validation for uploaded files. An authenticated attacker can exploit this vulnerability by uploading a specially crafted ZIP/PHP file to execute arbi
- 8.8 High severity
lepton: Unrestricted Upload of File with Dangerous Type
File Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute arbitrary code via uploading a crafted PHP file to the save.php and config.php component.
- 7.2 High severity
Leptoncms: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in LEPTON v7.0.0 allows authenticated attackers to execute arbitrary PHP code by uploading this code to the backend/languages/index.php languages area.