Login Request a demo
LE
Product
Leptoncms
by Lepton-cms · last CVE Dec 9, 2025
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 5Medium 3Low 0
Severity
All severities8Critical0High5Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Leptoncms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-56704
8.8
1%
Dec 9
LeptonCMS version 7.3.0 contains an arbitrary file upload vulnerability, which is caused by the lack of proper validation for uploaded files
Affected: 7.3.0
CVE-2024-29514
8.8
1%
Apr 2
File Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute arbitrary code via uploading a crafted PHP file
Affected: 7.1.0
CVE-2024-29515
8.8
1%
Mar 25
File Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute arbitrary code via uploading a crafted PHP file to the save.php and config.php…
Affected: 7.1.0
CVE-2024-24520
7.8
0%
Mar 21
An issue in Lepton CMS v.7.0.0 allows a local attacker to execute arbitrary code via the upgrade.php file in the languages place
Affected: 7.0.0
CVE-2024-24399
7.2
16%
Jan 25
An arbitrary file upload vulnerability in LEPTON v7.0.0 allows authenticated attackers to execute arbitrary PHP code by uploading this code to the backend/languages/index.php…
Affected: 7.0.0
CVE-2020-24872
6.1
1%
Aug 11
Cross Site Scripting (XSS) vulnerability in backend/pages/modify.php in Lepton-CMS version 4.7.0, allows remote attackers to execute arbitrary code
Affected: 4.7.0
CVE-2020-12705
6.1
1%
May 7
Multiple cross-site scripting (XSS) vulnerabilities exist in LeptonCMS before 4.6.0
Affected: before 4.6.0
CVE-2020-29240
4.8
2%
Dec 2
Lepton-CMS 4.7.0 is affected by cross-site scripting (XSS)
Affected: 4.7.0
Showing 8