CVE-2023-42180: Lenosp Project Lenosp

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

An arbitrary file upload vulnerability in the /user/upload component of lenosp 1.0-1.2.0 allows attackers to execute html code via a crafted JPG file.

Affected products

• Lenosp Project Lenosp: from 1.0, up to and including 1.2.0

Published 2023-09-14. Last modified 2026-06-17.