CVE-2020-23700

CVE-2020-23700 affects LavaLite-CMS 5.8.0, with a Cross-Site Scripting (XSS) vulnerability exposed via the Menu Links feature. The issue is documented across multiple feeds (NVD, Red Hat advisory, OSV, GHSA, CNVD, Veracode, etc.), consistently describing user-controllable script execution through...

CVE-2020-23700

Cross Site Scripting XSS vulnerability in LavaLite-CMS 5.8.0 via the Menu Links feature...

CVE-2020-23700: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in LavaLite-CMS 5.8.0 via the Menu Links feature...

PT-2021-10929

Name of the Vulnerable Software and Affected Versions LavaLite-CMS version 5.8.0 Description A Cross Site Scripting XSS issue exists, allowing potential exploitation via the Menu Links feature. Recommendations For LavaLite-CMS version 5.8.0, consider disabling the Menu Links feature until a patch...

Cross-Site Scripting (XSS)

lavalite/cms is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization of the address field...

CVE-2019-18883

XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field...

CVE-2019-18883

XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field...

Cross site scripting

XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field...

CVE-2019-18883

XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field...

CVE-2019-18883

CVE-2019-18883 is a stored XSS in Lavalite CMS version 5.7, exploitable via the admin/profile name or designation field. The root cause is a vulnerability in Lavalite’s web application code that allows injection of JavaScript into profile fields (as demonstrated by the historical exploit examples...

PT-2019-15711

Name of the Vulnerable Software and Affected Versions Lavalite CMS version 5.7 Description A cross-site scripting XSS issue exists, allowing potential exploitation via the admin/profile name or designation field. Recommendations For Lavalite CMS version 5.7, update to a newer version that contain...

CVE-2019-18883: Improper Neutralization of Input During Web Page Generation

XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field...

LavaLite CMS 5.7 Cross Site Scripting

Exploit Title: LavaLite CMS - 5.7 - Cross-Site Scripting Date: 09-10-2019 Exploit Author: Ismail Tasdelen Vendor Homepage: https://lavalite.org/ Software Link : https://github.com/LavaLite/cms Software : LavaLite CMS - v 5.7 Version : v 5.7 Vulernability Type : Cross-site Scripting Vulenrability ...

LavaLite Cross-Site Scripting Vulnerability (CNVD-2021-48847)

LavaLite is an open source lightweight content management system CMS. A cross-site scripting vulnerability exists in LavaLite 5.7 and earlier versions, which stems from a lack of proper validation of client-side data in the WEB application and can be exploited by an attacker to execute client-sid...

Cross-site Scripting(XSS)

lavalite/cms is vulnerable to cross-site scripting XSS attack. The attack is possible when a user with admin access privilege can enter arbitrary post requests through the account name in the Manage Clients screen...