Threat database

3 threats

Severity	CVSS	Signals	Threat	Source	Published
High	8.8	EPSS 0.8%	CVE-2025-56704LeptonCMS · Unrestricted File Upload High8.8EPSS 0.8%2025-12-09CVE Database V5CVE-2025-56704 LeptonCMS version 7.3.0 contains an arbitrary file upload vulnerability, which is caused by the lack of proper validation for uploaded files. An authenticated attacker can exploit this vulnerability by uploading a specially crafted ZIP/PHP file to execute arbitrary code. EPSS 0.8%Vulnerability CWE-434	CVE Database V5	2025-12-09
High	7.8	EPSS 0.4%	CVE-2024-24520leptoncms · Code Injection High7.8EPSS 0.4%2024-02-29CVE Database V5CVE-2024-24520 An issue in Lepton CMS v.7.0.0 allows a local attacker to execute arbitrary code via the upgrade.php file in the languages place. EPSS 0.4%Vulnerability CWE-94	CVE Database V5	2024-02-29
High	7.2	EPSS 15%	CVE-2024-24399LEPTON · An Arbitrary File Upload High7.2EPSS 15%2024-01-25CVE Database V5CVE-2024-24399 An arbitrary file upload vulnerability in LEPTON v7.0.0 allows authenticated attackers to execute arbitrary PHP code by uploading this code to the backend/languages/index.php languages area. EPSS 15%Vulnerability CWE-434	CVE Database V5	2024-01-25

Page 1 of 1