Lucene search

K
osvGoogleOSV:GHSA-5HCR-G32P-H74C
HistoryApr 27, 2024 - 12:30 a.m.

Lavalite CMS Cross Site Scripting vulnerability

2024-04-2700:30:37
Google
osv.dev
3
cross site scripting
lavalite cms
code execution
crafted payload
sensitive information

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute arbitrary code and obtain sensitive information via a crafted payload to the URL.

CPENameOperatorVersion
lavalite/cmseq10.1.0

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

Related for OSV:GHSA-5HCR-G32P-H74C