CVE-2020-29240

Lepton-CMS 4.7.0 is affected by cross-site scripting (XSS)

published December 2, 2020

CVSS
—
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

Lepton-CMS 4.7.0 is affected by cross-site scripting (XSS). An attacker can inject the XSS payload in the URL field of the admin page and each time an admin visits the Menu-Pages-Pages Overview section, the XSS will be triggered.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01693 · 76.9th percentile
Published
2020-12-02T16:45Z
EPSS history
Timeline
  • 02 DEC 16:45Z
    Lepton-CMS 4.7.0 is affected by cross-site scripting (XSS)
    cvelistv5