Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

13 records

Vendor: light0011 Clear all filters
TI-2026-76209 CVE-2026-112028 · GHSA-j2gm-w255-8qcm

Business logic error in light0011 cms Vote controller

Priority HIGH 70

A flaw has been found in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00343 Published 2026-10-18 No fix listed CWE-840
TI-2026-76207 CVE-2026-112026 · GHSA-gfvm-xrcv-wj4c

Weak password hashing in light0011 cms user model

Priority MEDIUM 61

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00202 Published 2026-10-18 Fix deferred CWE-326
TI-2026-76206 CVE-2026-112025 · GHSA-fwf8-p66g-5p39

Improper access control in light0011 cms captcha validation

Priority HIGH 70

A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00361 Published 2026-10-18 No fix listed CWE-266
TI-2026-59092 CVE-2026-86308 · GHSA-hqhg-qj9v-5w4m

light0011 cms Debug Mode config.php information disclosure

Priority HIGH 70

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00537 Published 2026-09-07 No fix listed CWE-200
TI-2026-59091 CVE-2026-86307 · GHSA-h595-wq86-pmx6

light0011 cms cross-site request forgery

Priority MEDIUM 57

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.0023 Published 2026-09-07 No fix listed CWE-352
TI-2026-59089 CVE-2026-86305 · GHSA-56x5-c934-mjjc

light0011 cms Upload.class.php upload unrestricted upload

Priority HIGH 70

A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00495 Published 2026-09-07 No fix listed CWE-284