Host Header Injection

lavalite/cms is vulnerable to host header injection.The vulnerability exists due to a lack of sanitization in the http header...

LavaLite Cross-Site Scripting Vulnerability (CNVD-2023-41501)

LavaLite is an open source lightweight content management system CMS. A cross-site scripting vulnerability exists in LavaLite version v9.0.0, which stems from the lack of effective filtering and escaping of user-supplied data by the account name, and can be exploited by an attacker to execute...

GHSA-H538-R9X6-RCMC LavaLite vulnerable to Cross Site Scripting

LavaLite v9.0.0 is vulnerable to Cross Site Scripting XSS...

LavaLite vulnerable to Cross Site Scripting

LavaLite v9.0.0 is vulnerable to Cross Site Scripting XSS...

CVE-2023-30124

LavaLite v9.0.0 is vulnerable to Cross Site Scripting XSS...

Cross site scripting

LavaLite v9.0.0 is vulnerable to Cross Site Scripting XSS...

LavaLite 跨站脚本漏洞

LavaLite is an open source lightweight content management system CMS. A cross-site scripting vulnerability exists in LavaLite version v9.0.0, which stems from the lack of effective filtering and escaping of user-supplied data by the account name, and can be exploited by an attacker to execute...

PT-2023-22547 · Lavalite · Lavalite

Name of the Vulnerable Software and Affected Versions: LavaLite version 9.0.0 Description: The issue is related to Cross Site Scripting XSS, which is a type of security vulnerability that can allow an attacker to inject malicious scripts into a website. Recommendations: For LavaLite version 9.0.0...

CVE-2023-30124

LavaLite v9.0.0 is vulnerable to Cross Site Scripting XSS...

CVE-2023-30124

LavaLite v9.0.0 is vulnerable to Cross Site Scripting XSS...

CVE-2023-30124

LavaLite v9.0.0 is vulnerable to Cross Site Scripting (XSS) due to lack of proper filtering and escaping of user-provided data in the account name, enabling execution of arbitrary scripts in the browser. No official fix/version is provided in the supplied documents; CVSS v3.1 base score 5.4 (Medi...

CVE-2023-30124

LavaLite v9.0.0 is vulnerable to Cross Site Scripting XSS...

GHSA-94Q4-V5G6-QP7X LavaLite CMS vulnerable to host header injection attack

LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack...

GHSA-6VCF-CFJP-QXCW LavaLite vulnerable to web cache poisoning

LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning...

LavaLite vulnerable to web cache poisoning

LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning...

LavaLite CMS vulnerable to host header injection attack

LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack...

CVE-2023-27238

LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning...

CVE-2023-27237

LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack...

Design/Logic Flaw

LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning...

Design/Logic Flaw

LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack...