lightcms vulnerabilities

CVEs whose affected-version data names the lightcms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2022-33009Medium· 4.8

A stored cross-site scripting (XSS) vulnerability in LightCMS v1.3.11 allows attackers to execute arbitrary web scripts or HTML via uploading a crafted PDF file.

A stored cross-site scripting (XSS) vulnerability in LightCMS v1.3.11 allows attackers to execute arbitrary web scripts or HTML via uploading a crafted PDF file.

▾ Sunlitlightcms_project · lightcmsEPSS 0.52%via NVD

lightcms vulnerabilities (CVEs) · VulnSea