Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-3355 1 Lightcms Project 1 Lightcms 2024-11-21 5.4 Medium
A stored-self XSS exists in LightCMS v1.3.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/SensitiveWords.
CVE-2021-27112 1 Lightcms Project 1 Lightcms 2024-11-21 9.8 Critical
LightCMS v1.3.5 contains a remote code execution vulnerability in /app/Http/Controllers/Admin/NEditorController.php during the downloading of external images.