NetSight
high8.8

CVE-2024-29514

File Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute arbitrary code via uploading a crafted PHP file.

Impact

File Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute arbitrary code via uploading a crafted PHP file.

Affected products

VendorProductAffected versions
Lepton-CmsLeptoncms
Version 7.1.0

Weakness classification

References