Vulnerability CVE-2022-33009
Published: 2022-06-27   Modified: 2022-06-28

Description:
A stored cross-site scripting (XSS) vulnerability in LightCMS v1.3.11 allows attackers to execute arbitrary web scripts or HTML via uploading a crafted PDF file.

 References:
https://github.com/eddy8/LightCMS/issues/30
http://lightcms.com
https://github.com/eddy8/LightCMS
Copyright 2026, cxsecurity.com

 

Back to Top