Mossle Lemon
4 CVEs affecting Mossle Lemon. Latest disclosed: 2025-08-25. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-18315 | High | 7.5 | 2018-10-15 | com/mossle/cdn/CdnController.java in lemon 1.9.0 allows attackers to upload arbitrary files because the copyMultipartFileToFile method in CdnUtils only checks… |
CVE-2025-9406 | Medium | 6.3 | 2025-08-25 | A weakness has been identified in xuhuisheng lemon up to 1.13.0. This affects the function uploadImage of the file CmsArticleController.java of the component c… |
CVE-2020-20598 | Medium | 6.1 | 2021-12-22 | A cross-site scripting (XSS) vulnerability in the Editing component of lemon V1.10.0 allows attackers to execute arbitrary web scripts or HTML. |
CVE-2020-20597 | Medium | 6.1 | 2021-12-22 | A cross-site scripting (XSS) vulnerability in the potrtalItemName parameter in \web\PortalController.java of lemon V1.10.0 allows attackers to execute arbitrar… |