PatchTheCVElylme spage vulnerabilities and fixes
Recent CVEs affecting lylme spage, with upgrade or downgrade steps. 9 tracked.
Also searched as: lylmespage.
lylme spage has 9 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 3. Most recent: 2025-05-11. Highest priority: CVE-2024-34982 (score 70/100).
- CVE-2025-4543 HIGH 7.3 DOWNGRADE A vulnerability, which was classified as critical, was found in LyLme Spage 2.1
- CVE-2024-9790 MEDIUM 4.7 DOWNGRADE A vulnerability was found in LyLme_spage 1.9.5
- CVE-2024-9789 MEDIUM 4.7 DOWNGRADE A vulnerability was found in LyLme_spage 1.9.5 and classified as critical
- CVE-2024-9788 MEDIUM 4.7 DOWNGRADE A vulnerability has been found in LyLme_spage 1.9.5 and classified as critical
- CVE-2024-48357 CRITICAL 9.8 UPGRADE LyLme Spage 1.2.0 through 1.6.0 is vulnerable to SQL Injection via /admin/apply.php.
- CVE-2024-48356 CRITICAL 9.8 UPGRADE LyLme Spage <=1.6.0 is vulnerable to SQL Injection via /admin/group.php.
- CVE-2024-48176 CRITICAL 9.8 DOWNGRADE Lylme Spage v1.9.5 is vulnerable to Incorrect Access Control
- CVE-2024-36674 MEDIUM 6.1 DOWNGRADE LyLme_spage v1.9.5 is vulnerable to Cross Site Scripting (XSS) via admin/link.php.
- CVE-2024-34982 CRITICAL 9.8 DOWNGRADE An arbitrary file upload vulnerability in the component /include/file.php of lylme_spage v1.9.5 allows attacke
FAQ
How do I fix lylme spage vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is lylme spage being exploited right now?
None of the tracked lylme spage CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which lylme spage CVE should I patch first?
CVE-2024-34982 currently ranks highest (70/100): An arbitrary file upload vulnerability in the component /include/file.php of lylme_spage v1.9.5 allows attacke.