Skip to content
Noroxi

lightcms project records

6 published records for vendor lightcms project.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 22
  3. 23
  4. 24
  5. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2021-27112
    40Plan

    LightCMS v1.3.5 contains a remote code execution vulnerability in /app/Http/Controllers/Admin/NEditorController.php during the downloading o

    CriticalCVSS 9.8No exploitEPSS 2%

    lightcms project · lightcmsApr 15, 2021

  • CVE-2023-27060
    39Monitor

    LightCMS v1.3.7 was discovered to contain a remote code execution (RCE) vulnerability via the image:make function.

    CriticalCVSS 9.8No exploitEPSS 1%

    lightcms project · lightcmsMar 22, 2023

  • CVE-2026-29934
    24Monitor

    A reflected cross-site scripting (XSS) vulnerability in the /admin/menus component of Lightcms v2.0 allows attackers to execute arbitrary Ja

    MediumCVSS 6.1No exploitEPSS 0%

    lightcms project · lightcmsMar 26, 2026

  • CVE-2021-3355
    23Monitor

    A stored-self XSS exists in LightCMS v1.3.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/S

    MediumCVSS 5.4Proof of conceptEPSS 7%

    lightcms project · lightcmsFeb 24, 2021

  • CVE-2024-22559
    21Monitor

    LightCMS v2.0 is vulnerable to Cross Site Scripting (XSS) in the Content Management - Articles field.

    MediumCVSS 5.4No exploitEPSS 0%

    lightcms project · lightcmsJan 29, 2024

  • CVE-2022-33009
    19Monitor

    A stored cross-site scripting (XSS) vulnerability in LightCMS v1.3.11 allows attackers to execute arbitrary web scripts or HTML via uploadin

    MediumCVSS 4.8No exploitEPSS 1%

    lightcms project · lightcmsJun 27, 2022