light0011 cms vulnerabilities
13 published CVEs name light0011 cms among the affected products.
- Published CVEs
- 13
- Last 12 months
- 13
- Critical
- 0
- Known exploited
- 0
Critical 0High 0Medium 13Low 0Not scored 0
Newest CVEs
- CVE-2026-112028
light0011 cms Vote VoteController.class.php logic error
light0011 · cms
Medium6.9 - CVE-2026-112027
light0011 cms Uploadify check-exists.php file_exists file information disclosure
light0011 · cms
Medium6.9 - CVE-2026-112026
light0011 cms UserModel.class.php sha1 weak password hash
light0011 · cms
Medium6.3 - CVE-2026-112025
light0011 cms Captcha Validation UserController.class.php access control
light0011 · cms
Medium6.9 - CVE-2026-86308
light0011 cms Debug Mode config.php information disclosure
light0011 · cms
Medium6.9 - CVE-2026-86307
light0011 cms cross-site request forgery
light0011 · cms
Medium5.3 - CVE-2026-86306
light0011 cms Cookie Helper UserModel.class.php improper authentication
light0011 · cms
Medium6.9 - CVE-2026-86305
light0011 cms Upload.class.php upload unrestricted upload
light0011 · cms
Medium6.9 - CVE-2026-85382
light0011 cms Chapter Content Output oneChapter.tpl htmlspecialchars_decode cross site scripting
light0011 · cms
Medium5.3 - CVE-2026-85381
light0011 cms Chapter Controller ChapterController.class.php authorization
light0011 · cms
Medium6.9
Most common weaknesses
- CWE-284 Improper access control3
- CWE-200 Exposure of sensitive information2
- CWE-285 Improper authorization2
- CWE-639 Authorization bypass through a user-controlled key (IDOR)2
- CWE-266 1
- CWE-287 Improper authentication1
- CWE-326 1
- CWE-352 Cross-site request forgery (CSRF)1
- CWE-434 Unrestricted file upload1
- CWE-538 1