CVE-2020-36395

A stored cross site scripting XSS vulnerability in the /admin/user/team component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter...

CVE-2020-36395

CVE-2020-36395 affects LavaLite 5.8.0 with a stored XSS vulnerability in the /admin/user/team component. The issue allows an authenticated attacker to inject and execute web scripts or HTML via the New parameter, enabling arbitrary script execution in the context of the affected user. Multiple so...