Lightcms Project: >> Lightcms >> 2.0 Security Vulnerabilities
A reflected cross-site scripting (XSS) vulnerability in the /admin/menus component of Lightcms v2.0 allows attackers to execute arbitrary Javascript in the context of the user's browser via modifying the referer value in the request header.
CVSS Score
6.1
EPSS Score
0.0
Published
2026-03-26
LightCMS v2.0 is vulnerable to Cross Site Scripting (XSS) in the Content Management - Articles field.
CVSS Score
5.4
EPSS Score
0.001
Published
2024-01-29