CVE-2020-36395

CVE-2020-36395 affects LavaLite 5.8.0 with a stored XSS vulnerability in the /admin/user/team component. The issue allows an authenticated attacker to inject and execute web scripts or HTML via the New parameter, enabling arbitrary script execution in the context of the affected user. Multiple so...

CVE-2020-36395

A stored cross site scripting XSS vulnerability in the /admin/user/team component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter...

LavaLite 跨站脚本漏洞

Lavalite is an open source content management system developed using the Laravel framework. A stored cross-site scripting vulnerability exists in the /admin/contact/contact component of LavaLite version 5.8.0, which can be exploited by an attacker to execute arbitrary Web script or HTML via the...

CVE-2020-36397: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in the /admin/contact/contact component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter...

PT-2021-12039

Name of the Vulnerable Software and Affected Versions: LavaLite version 5.8.0 Description: A stored cross site scripting XSS issue in the "/admin/contact/contact" API endpoint allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the New...

CVE-2020-36395: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in the /admin/user/team component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter...

CVE-2020-36396: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in the /admin/roles/role component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter...

PT-2021-12038

Name of the Vulnerable Software and Affected Versions: LavaLite version 5.8.0 Description: A stored cross site scripting XSS issue exists in the /admin/roles/role component, allowing authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the New...

LavaLite 跨站脚本漏洞

Lavalite is an open source content management system developed using the Laravel framework. A stored cross-site scripting vulnerability exists in the /admin/user/team component of LavaLite version 5.8.0, which can be exploited by an attacker to execute arbitrary Web script or HTML via the ""New""...

PT-2021-12037

Name of the Vulnerable Software and Affected Versions: LavaLite version 5.8.0 Description: A stored cross site scripting XSS issue exists in the /admin/user/team component, allowing authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the New...

Cross-Site Scripting (XSS)

lavalite/cms is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization of the address field...

LavaLite Cross-Site Scripting Vulnerability (CNVD-2021-29738)

Lavalite is an open source content management system developed using the Laravel framework. A cross-site scripting vulnerability exists in LavaLite version 5.8.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the "address" field...

CVE-2020-28124

Cross Site Scripting XSS in LavaLite 5.8.0 via the Address field...

CVE-2020-28124

Cross Site Scripting XSS in LavaLite 5.8.0 via the Address field...

Cross site scripting

Cross Site Scripting XSS in LavaLite 5.8.0 via the Address field...

CVE-2020-28124

Cross Site Scripting XSS in LavaLite 5.8.0 via the Address field...

CVE-2020-28124

CVE-2020-28124 describes a Cross-Site Scripting (XSS) vulnerability in LavaLite CMS 5.8.0 exploitable via the address field. The issue arises from insufficient input sanitization of the address field, enabling injected script content that could be reflected or stored depending on context (per sou...

CVE-2020-28124

Cross Site Scripting XSS in LavaLite 5.8.0 via the Address field...

PT-2021-11446

Name of the Vulnerable Software and Affected Versions: LavaLite version 5.8.0 Description: The issue is related to Cross Site Scripting XSS that can be triggered via the Address field. This allows for potentially malicious scripts to be executed. Recommendations: For LavaLite version 5.8.0,...

LavaLite 跨站脚本漏洞

Lavalite is an open source content management system developed using the Laravel framework. A cross-site scripting vulnerability exists in LavaLite version 5.8.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the "address" field...