CVE-2020-36397

Summary of CVE-2020-36397 : A stored cross-site scripting (XSS) vulnerability exists in LavaLite 5.8.0, specifically in the /admin/contact/contact component. The issue allows authenticated attackers to inject arbitrary web scripts or HTML via a crafted payload entered into the “New” parameter. Th...