Lavalite Cross-Site Scripting Vulnerability (CNVD-2020-41526)

Lavalite is an open source PHP-based content management system CMS. A cross-site scripting vulnerability exists in Lavalite version 5.7, which can be exploited to conduct cross-site scripting attacks via the admin/profile name or designation fields...