CVE-2024-24399

PoC —

CVSS 3.1

7.2 high

EPSS

16%p97

Published

Jan 25, 2024 (Jan 25, 2024)

Modified

Jun 17, 2026

Description

An arbitrary file upload vulnerability in LEPTON v7.0.0 allows authenticated attackers to execute arbitrary PHP code by uploading this code to the backend/languages/index.php languages area.

Vendors: lepton-cms
Products: leptoncms
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (15.6%)

In the news0 stories

No ingested article mentions this CVE yet.