CVE-2024-31828

Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute arbitrary code and obtain sensitive information via a crafted payload to the URL...

CVE-2023-36983

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...

CVE-2023-36984

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...

CVE-2023-27237

LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack...

CVE-2020-23234

Cross Site Scripting XSS vulnerabiity exists in LavaLite CMS 5.8.0 via the Menu Blocks feature, which can be bypassed by using HTML event handlers, such as "ontoggle,"...

CVE-2020-23700

Cross Site Scripting XSS vulnerability in LavaLite-CMS 5.8.0 via the Menu Links feature...

CVE-2019-18883

XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field...

GHSA-5HCR-G32P-H74C Lavalite CMS Cross Site Scripting vulnerability

Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute arbitrary code and obtain sensitive information via a crafted payload to the URL...

Lavalite CMS Cross Site Scripting vulnerability

Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute arbitrary code and obtain sensitive information via a crafted payload to the URL...

CVE-2024-31828

Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute arbitrary code and obtain sensitive information via a crafted payload to the URL...

PT-2024-24232 · Unknown · Lavalite Cms

Name of the Vulnerable Software and Affected Versions: Lavalite CMS version 10.1.0 Description: The issue allows attackers to execute arbitrary code and obtain sensitive information via a crafted payload to the URL. This is a Cross Site Scripting vulnerability. Recommendations: For Lavalite CMS...

CVE-2024-31828

Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute arbitrary code and obtain sensitive information via a crafted payload to the URL...

CVE-2024-31828

Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute arbitrary code and obtain sensitive information via a crafted payload to the URL...

CVE-2024-31828

Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute arbitrary code and obtain sensitive information via a crafted payload to the URL...

Lavalite CMS 安全漏洞

Lavalite CMS is an open source PHP-based content management system CMS. A security vulnerability exists in Lavalite CMS version v.10.1.0, which stems from the presence of a cross-site scripting vulnerability...

Information Disclosure

lavalite/cms is vulnerable to Information Disclosure. The vulnerability exists due to lack of access restrictions which allows an attacker to gain access to sensitive information...

Information Disclosure

lavalite/cms is vulnerable to Information Disclosure. The vulnerability exists due to lack of access restrictions which allows an attacker to gain access to sensitive information...

CVE-2023-36983

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...

CVE-2023-36984

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...

CVE-2023-36983

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...