Lucene search
+L

209 matches found

NVD
NVD
added 2018/09/05 10:29 p.m.10 views

CVE-2018-16551

LavaLite 5.5 has XSS via a /edit URI, as demonstrated by client/job/job/Zy8PWBekrJ/edit...

5.4CVSS5.2AI score0.00667EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2018/09/05 10:0 p.m.12 views

CVE-2018-16551

LavaLite 5.5 has XSS via a /edit URI, as demonstrated by client/job/job/Zy8PWBekrJ/edit...

5.2AI score0.00667EPSS
SaveExploits1References1
CVE
CVE
added 2018/09/05 10:0 p.m.43 views

CVE-2018-16551

CVE-2018-16551 affects LavaLite 5.5 and describes a cross-site scripting (XSS) vulnerability in the /edit URI, demonstrated by examples such as client/job/job/Zy8PWBekrJ/edit. The connected documents confirm the vulnerable component and the entry point, but do not provide concrete details on the ...

5.4CVSS5.1AI score0.00667EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2018/01/05 12:0 a.m.6 views

LavaLite Cross-Site Scripting Vulnerability

LavaLite is an open source lightweight CMS content management system. A cross-site scripting vulnerability exists in the log creation page in LavaLite version 5.2.4. A remote attacker can exploit this vulnerability to cause a denial of service and execute JavaScrpt code...

5.4CVSS6.5AI score0.00734EPSS
SaveExploits0References1
Prion
Prion
added 2018/01/03 3:29 p.m.16 views

Cross site scripting

LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code...

3.5CVSS5.4AI score0.00734EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2018/01/03 3:29 p.m.19 views

CVE-2017-1000467

LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code...

5.4CVSS5.6AI score
SaveExploits0References1
NVD
NVD
added 2018/01/03 3:29 p.m.23 views

CVE-2017-1000467

LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code...

5.4CVSS5.3AI score0.00734EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/01/03 3:0 p.m.16 views

CVE-2017-1000467

LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code...

5.3AI score0.00734EPSS
SaveExploits0References1
CVE
CVE
added 2018/01/03 3:0 p.m.48 views

CVE-2017-1000467

CVE-2017-1000467 concerns LavaLite 5.2.4 with a stored cross-site scripting vulnerability on the blog creation page, which can lead to disruption of service and execution of JavaScript. The connected documents consistently reference the same issue across multiple sources (Red Hat, GHSA, CNVD, CVE...

5.4CVSS5.2AI score0.00734EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder