TI-2025-08618 CVE-2025-9406 · GHSA-3448-gpjv-rgph
xuhuisheng lemon CmsArticleController.java uploadImage unrestricted upload
Priority MEDIUM 57
A weakness has been identified in xuhuisheng lemon up to 1.13.0.
Vulnerabilities
4 records
TI-2020-13884 CVE-2020-20598 · GHSA-8fpc-4h73-mmqj
A cross-site scripting (XSS) vulnerability in the Editing component of lemon V1.10.0…
Priority LOW 29
A cross-site scripting (XSS) vulnerability in the Editing component of lemon V1.10.0 allows attackers to execute arbitrary web scripts or HTML.
TI-2020-13883 CVE-2020-20597 · GHSA-359r-3ww6-v5xr
A cross-site scripting (XSS) vulnerability in the potrtalItemName parameter in…
Priority LOW 29
A cross-site scripting (XSS) vulnerability in the potrtalItemName parameter in \web\PortalController.java of lemon V1.10.0 allows attackers to execute arbitrary web scripts or HTML.
TI-2018-12935 CVE-2018-18315 · GHSA-h9qg-xrp6-7fc4
com/mossle/cdn/CdnController.java in lemon 1.9.0 allows attackers to upload arbitrary…
Priority LOW 35
com/mossle/cdn/CdnController.java in lemon 1.9.0 allows attackers to upload arbitrary files because the copyMultipartFileToFile method in CdnUtils only checks for a ../ substring, and does not validate the file type and…