Approved changes feed: RSS · Atom

cpe:2.3:a:lepton-cms:leptoncms:7.0.0:*:*:*:*:*:*:*

part: a version: 7.0.0 update: *

VendorLepton Cms (af013ec0-8664-5501-bb95-12a1190865ab)
ProductLeptoncms (ed01bfed-3a39-5d50-82bc-eb722a8b3ce8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/lepton-project/lepton purl2cpe 2026-06-01 10:12:29.061296
pkg:gitlab/lepton-project/lepton purl2cpe 2026-06-01 10:12:29.061297

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-24520 vulnerable 2026-06-08 06:29:41.449711 Details available
An issue in Lepton CMS v.7.0.0 allows a local attacker to execute arbitrary code via the upgrade.php file in the languages place.
Published: 2024-02-29T00:00:00.000Z
Updated: 2026-07-09T00:30:19.507Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24399 vulnerable 2026-06-08 06:29:41.313791 Details available
An arbitrary file upload vulnerability in LEPTON v7.0.0 allows authenticated attackers to execute arbitrary PHP code by uploading this code to the backend/languages/index.php languages area.
Published: 2024-01-25T00:00:00.000Z
Updated: 2025-06-05T18:25:26.926Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.