CVE-2018-16551

LavaLite 5.5 has XSS via a /edit URI, as demonstrated by client/job/job/Zy8PWBekrJ/edit...

CVE-2018-16551

LavaLite 5.5 has XSS via a /edit URI, as demonstrated by client/job/job/Zy8PWBekrJ/edit...

CVE-2018-16551

LavaLite 5.5 has XSS via a /edit URI, as demonstrated by client/job/job/Zy8PWBekrJ/edit...

CVE-2018-16551

CVE-2018-16551 affects LavaLite 5.5 and describes a cross-site scripting (XSS) vulnerability in the /edit URI, demonstrated by examples such as client/job/job/Zy8PWBekrJ/edit. The connected documents confirm the vulnerable component and the entry point, but do not provide concrete details on the ...

PT-2018-13627

Name of the Vulnerable Software and Affected Versions LavaLite version 5.5 Description The issue is related to a Cross-Site Scripting XSS problem. It can be triggered via the /edit URI, as demonstrated by the example client/job/job/Zy8PWBekrJ/edit. Recommendations For LavaLite version 5.5, consid...

CVE-2018-16551: Improper Neutralization of Input During Web Page Generation

LavaLite 5.5 has XSS via a /edit URI, as demonstrated by client/job/job/Zy8PWBekrJ/edit...

LavaLite Cross-Site Scripting Vulnerability

LavaLite is an open source lightweight CMS content management system. A cross-site scripting vulnerability exists in the log creation page in LavaLite version 5.2.4. A remote attacker can exploit this vulnerability to cause a denial of service and execute JavaScrpt code...

CVE-2017-1000467

LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code...

CVE-2017-1000467

LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code...

Cross site scripting

LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code...

CVE-2017-1000467

CVE-2017-1000467 concerns LavaLite 5.2.4 with a stored cross-site scripting vulnerability on the blog creation page, which can lead to disruption of service and execution of JavaScript. The connected documents consistently reference the same issue across multiple sources (Red Hat, GHSA, CNVD, CVE...

CVE-2017-1000467

LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code...

CVE-2017-1000467

LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code...

CVE-2017-1000467: Improper Neutralization of Input During Web Page Generation

LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code...

PT-2018-5234

Name of the Vulnerable Software and Affected Versions LavaLite version 5.2.4 Description The issue concerns a stored cross-site scripting vulnerability within the blog creation page. This can lead to disruption of service and allow the execution of javascript code. Recommendations For LavaLite...