209 matches found
CVE-2020-28124
CVE-2020-28124 describes a Cross-Site Scripting (XSS) vulnerability in LavaLite CMS 5.8.0 exploitable via the address field. The issue arises from insufficient input sanitization of the address field, enabling injected script content that could be reflected or stored depending on context (per sou...
LavaLite 跨站脚本漏洞
Lavalite is an open source content management system developed using the Laravel framework. A cross-site scripting vulnerability exists in LavaLite version 5.8.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the "address" field...
Lavalite Cross-Site Scripting Vulnerability (CNVD-2020-41526)
Lavalite is an open source PHP-based content management system CMS. A cross-site scripting vulnerability exists in Lavalite version 5.7, which can be exploited to conduct cross-site scripting attacks via the admin/profile name or designation fields...
CVE-2019-18883
XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field...
CVE-2019-18883
XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field...
Cross site scripting
XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field...
CVE-2019-18883
CVE-2019-18883 is a stored XSS in Lavalite CMS version 5.7, exploitable via the admin/profile name or designation field. The root cause is a vulnerability in Lavalite’s web application code that allows injection of JavaScript into profile fields (as demonstrated by the historical exploit examples...
CVE-2019-18883
XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field...
LavaLite CMS 5.7 Cross Site Scripting
Exploit Title: LavaLite CMS - 5.7 - Cross-Site Scripting Date: 09-10-2019 Exploit Author: Ismail Tasdelen Vendor Homepage: https://lavalite.org/ Software Link : https://github.com/LavaLite/cms Software : LavaLite CMS - v 5.7 Version : v 5.7 Vulernability Type : Cross-site Scripting Vulenrability ...
LavaLite Cross-Site Scripting Vulnerability (CNVD-2021-48847)
LavaLite is an open source lightweight content management system CMS. A cross-site scripting vulnerability exists in LavaLite 5.7 and earlier versions, which stems from a lack of proper validation of client-side data in the WEB application and can be exploited by an attacker to execute client-sid...
Cross-site Scripting(XSS)
lavalite/cms is vulnerable to cross-site scripting XSS attack. The attack is possible when a user with admin access privilege can enter arbitrary post requests through the account name in the Manage Clients screen...
CVE-2019-17434
LavaLite through 5.7 has XSS via a crafted account name that is mishandled on the Manage Clients screen...
CVE-2019-17434
LavaLite through 5.7 has XSS via a crafted account name that is mishandled on the Manage Clients screen...
Cross site scripting
LavaLite through 5.7 has XSS via a crafted account name that is mishandled on the Manage Clients screen...
CVE-2019-17434
LavaLite CMS ≤ 5.7 is affected by a cross-site scripting (XSS) vulnerability triggered by a crafted account name on the Manage Clients screen. The root cause is mishandling/validation of client-side data in the web application (CVE-2019-17434). Some sources indicate exploitation may require admin...
CVE-2019-17434
LavaLite through 5.7 has XSS via a crafted account name that is mishandled on the Manage Clients screen...
LavaLite Cross-Site Scripting Vulnerability (CNVD-2018-19424)
LavaLite is an open source lightweight CMS content management system. A cross-site scripting vulnerability exists in LavaLite version 5.5. A remote attacker can use the /edit URI to inject arbitrary Web script or HTML...
Cross-Site Scripting (XSS)
Lavalite/framework is vulnerable to cross-site scripting. A remote attacker is able to inject arbitrary JavaScript into a victim's browser through multiple entries in the edit page...