Threat database

3 threats

Severity	CVSS	Signals	Threat	Source	Published
High	8.8	EPSS 0.8%	CVE-2025-56704LeptonCMS · n/a High8.8EPSS 0.8%2025-12-09CVE Database V5CVE-2025-56704 LeptonCMS version 7.3.0 contains an arbitrary file upload vulnerability, which is caused by the lack of proper validation for uploaded files. An authenticated attacker can exploit this vulnerability by uploading a specially crafted ZIP/PHP file to execute arbitrary code. EPSS 0.8%Vulnerability #cwe-434	CVE Database V5	2025-12-09
High	7.8	EPSS 0.4%	CVE-2024-24520leptoncms · n/a High7.8EPSS 0.4%2024-02-29CVE Database V5CVE-2024-24520 An issue in Lepton CMS v.7.0.0 allows a local attacker to execute arbitrary code via the upgrade.php file in the languages place. EPSS 0.4%Vulnerability	CVE Database V5	2024-02-29
High	7.2	EPSS 15%	CVE-2024-24399 · n/a High7.2EPSS 15%2024-01-25CVE Database V5 An arbitrary file upload vulnerability in LEPTON v7.0.0 allows authenticated attackers to execute arbitrary PHP code by uploading this code to the backend/languages/index.php languages area. EPSS 15%Vulnerability	CVE Database V5	2024-01-25

Page 1 of 1