CVE-2020-36395

CVE-2020-36395 affects LavaLite 5.8.0 with a stored XSS vulnerability in the /admin/user/team component. The issue allows an authenticated attacker to inject and execute web scripts or HTML via the New parameter, enabling arbitrary script execution in the context of the affected user. Multiple so...