| Package | Affected versions | Patched versions |
|---|---|---|
| leptoncms | = 4.7.0 |
Lepton-CMS 4.7.0 is affected by cross-site scripting (XSS). An attacker can inject the XSS payload in the URL field of the admin page and each time an admin visits the Menu-Pages-Pages Overview section, the XSS will be triggered.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free