209 matches found
CVE-2020-36395
A stored cross site scripting XSS vulnerability in the /admin/user/team component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter...
CVE-2020-36396
A stored cross site scripting XSS vulnerability in the /admin/roles/role component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter...
CVE-2020-36397
A stored cross site scripting XSS vulnerability in the /admin/contact/contact component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter...
CVE-2020-36395
A stored cross site scripting XSS vulnerability in the /admin/user/team component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter...
Cross site scripting
A stored cross site scripting XSS vulnerability in the /admin/roles/role component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter...
Cross site scripting
A stored cross site scripting XSS vulnerability in the /admin/contact/contact component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter...
Cross site scripting
A stored cross site scripting XSS vulnerability in the /admin/user/team component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter...
CVE-2020-36397
Summary of CVE-2020-36397 : A stored cross-site scripting (XSS) vulnerability exists in LavaLite 5.8.0, specifically in the /admin/contact/contact component. The issue allows authenticated attackers to inject arbitrary web scripts or HTML via a crafted payload entered into the “New” parameter. Th...
CVE-2020-36397
A stored cross site scripting XSS vulnerability in the /admin/contact/contact component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter...
CVE-2020-36396
The CVE refers to LavaLite 5.8.0, specifically a stored XSS in the /admin/roles/role component. An authenticated attacker can inject arbitrary web scripts/HTML via the New parameter, enabling script execution in the context of the logged-in user. The provided connected documents confirm the vulne...
CVE-2020-36395
CVE-2020-36395 affects LavaLite 5.8.0 with a stored XSS vulnerability in the /admin/user/team component. The issue allows an authenticated attacker to inject and execute web scripts or HTML via the New parameter, enabling arbitrary script execution in the context of the affected user. Multiple so...
CVE-2020-36395
A stored cross site scripting XSS vulnerability in the /admin/user/team component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter...
LavaLite 跨站脚本漏洞
Lavalite is an open source content management system developed using the Laravel framework. A stored cross-site scripting vulnerability exists in the /admin/contact/contact component of LavaLite version 5.8.0, which can be exploited by an attacker to execute arbitrary Web script or HTML via the...
LavaLite 跨站脚本漏洞
Lavalite is an open source content management system developed using the Laravel framework. A stored cross-site scripting vulnerability exists in the /admin/user/team component of LavaLite version 5.8.0, which can be exploited by an attacker to execute arbitrary Web script or HTML via the ""New""...
Cross-Site Scripting (XSS)
lavalite/cms is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization of the address field...
LavaLite Cross-Site Scripting Vulnerability (CNVD-2021-29738)
Lavalite is an open source content management system developed using the Laravel framework. A cross-site scripting vulnerability exists in LavaLite version 5.8.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the "address" field...
CVE-2020-28124
Cross Site Scripting XSS in LavaLite 5.8.0 via the Address field...
CVE-2020-28124
Cross Site Scripting XSS in LavaLite 5.8.0 via the Address field...