An issue in Lepton CMS v.7.0.0 allows a local attacker to execute arbitrary code via the upgrade.php file in the languages place.

Published Feb 29, 2024 · Updated Jul 9, 2026 · Assigned by mitre