Every CVE whose affected-product data names Mossle Lemon, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (4)
CVE-2018-18315 — CVSS 7.5 (high): com/mossle/cdn/CdnController.java in lemon 1.9.0 allows attackers to upload arbitrary files because the copyMultipartFileToFile method in…
CVE-2025-9406 — CVSS 6.3 (medium): A weakness has been identified in xuhuisheng lemon up to 1.13.0. This affects the function uploadImage of the file CmsArticleController.java…
CVE-2020-20597 — CVSS 6.1 (medium): A cross-site scripting (XSS) vulnerability in the potrtalItemName parameter in \web\PortalController.java of lemon V1.10.0 allows attackers…
CVE-2020-20598 — CVSS 6.1 (medium): A cross-site scripting (XSS) vulnerability in the Editing component of lemon V1.10.0 allows attackers to execute arbitrary web scripts or…