CVE-2024-31828

2024-04-2600:00:00

mitre

www.cve.org

cross site scripting

lavalite cms

arbitrary code execution

sensitive information

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

JSON

Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute arbitrary code and obtain sensitive information via a crafted payload to the URL.

References

jinmu1108.github.io/uncategorized/CVE-2024-31828/