| Package | Affected versions | Patched versions |
|---|---|---|
| lepton cms | = 4.5.0 |
An XSS vulnerability exists in modules/wysiwyg/save.php of LeptonCMS 4.5.0. This can be exploited because the only security measure used against XSS is the stripping of SCRIPT elements. A malicious actor can use HTML event handlers to run JavaScript instead of using SCRIPT elements.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free