Lucene search

K
cvelistMitreCVELIST:CVE-2020-29240
HistoryDec 02, 2020 - 4:45 p.m.

CVE-2020-29240

2020-12-0216:45:16
mitre
www.cve.org
2
lepton-cms
xss
cross-site scripting
admin page
url vulnerability
menu-pages-pages overview

EPSS

0.001

Percentile

45.6%

Lepton-CMS 4.7.0 is affected by cross-site scripting (XSS). An attacker can inject the XSS payload in the URL field of the admin page and each time an admin visits the Menu-Pages-Pages Overview section, the XSS will be triggered.

EPSS

0.001

Percentile

45.6%

Related for CVELIST:CVE-2020-29240