Approved changes feed: RSS · Atom

cpe:2.3:a:lepton-cms:leptoncms:7.3.0:*:*:*:*:*:*:*

part: a version: 7.3.0 update: *

VendorLepton Cms (af013ec0-8664-5501-bb95-12a1190865ab)
ProductLeptoncms (ed01bfed-3a39-5d50-82bc-eb722a8b3ce8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/lepton-project/lepton purl2cpe 2026-09-15 20:24:56.252422
pkg:gitlab/lepton-project/lepton purl2cpe 2026-09-15 20:24:56.252424

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-56704 vulnerable 2026-06-08 07:33:15.687281 Details available
LeptonCMS version 7.3.0 contains an arbitrary file upload vulnerability, which is caused by the lack of proper validation for uploaded files. An authenticated attacker can exploit this vulnerability by uploading a specially crafted ZIP/PHP file to execute arbitrary code.
Published: 2025-12-09T00:00:00.000Z
Updated: 2026-07-05T01:23:13.897Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.