PT-2024-20384

Name of the Vulnerable Software and Affected Versions LeptonCMS version 7.0.0 Description An arbitrary file upload vulnerability allows authenticated attackers to execute arbitrary PHP code by uploading crafted PHP files to the backend/languages/index.php languages area. This enables the executio...