Design/Logic Flaw

LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning...

Design/Logic Flaw

LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack...

CVE-2023-27237

LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack...

CVE-2023-27238

LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning...

CVE-2023-27238

LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning...

CVE-2023-27238

CVE-2023-27238 affects LavaLite CMS v9.0.0, described in the provided documents as vulnerable to web cache poisoning. The materials do not specify the exact vulnerable component, root cause, affected configurations, or exploit details. Exploitation status is not described in the supplied document...

LavaLite 跨站脚本漏洞

LavaLite is an open source lightweight content management system CMS. A security vulnerability exists in LavaLite CMS version v 9.0.0 that stems from vulnerability to host header injection attacks...

CVE-2023-27237

LavaLite CMS v9.0.0 is reported vulnerable to a host header injection attack. The root cause cited across multiple sources is insufficient sanitization of HTTP host headers, enabling manipulation that could affect request routing or cache behavior. No explicit exploit details or in‑the‑wild activ...

CVE-2023-27238

LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning...

Lavalite 9.0.0 Path Traversal

Exploit Title: Lavalite v9.0.0 - XSRF-TOKEN cookie File path traversal Exploit Author: nu11secur1ty Date: 09.29.2022 Vendor: https://lavalite.org/ Software: https://github.com/LavaLite/cms/releases/tag/v9.0.0 Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/LavaLite...

Path Traversal

lavalite/cms is vulnerable to path traversal. The vulnerability is due to the XSRF-TOKEN cookie allowing a malicious attacker read access to the sensitive information of arbitrary files on the server...

GHSA-592V-7FRM-H44Q Cross-site scripting in LavaLite-CMS

Cross Site Scripting XSS vulnerability in LavaLite-CMS 5.8.0 via the Menu Links feature...

Cross-site scripting in LavaLite-CMS

Cross Site Scripting XSS vulnerability in LavaLite-CMS 5.8.0 via the Menu Links feature...

GHSA-V2F3-F8X4-M3W8 Cross Site Scripting in LavaLite CMS

Cross Site Scripting XSS vulnerabiity exists in LavaLite CMS 5.8.0 via the Menu Blocks feature, which can be bypassed by using HTML event handlers, such as "ontoggle,"...

Cross Site Scripting in LavaLite CMS

Cross Site Scripting XSS vulnerabiity exists in LavaLite CMS 5.8.0 via the Menu Blocks feature, which can be bypassed by using HTML event handlers, such as "ontoggle,"...

CVE-2020-23234

Cross Site Scripting XSS vulnerabiity exists in LavaLite CMS 5.8.0 via the Menu Blocks feature, which can be bypassed by using HTML event handlers, such as "ontoggle,"...

CVE-2020-23234

Cross Site Scripting XSS vulnerabiity exists in LavaLite CMS 5.8.0 via the Menu Blocks feature, which can be bypassed by using HTML event handlers, such as "ontoggle,"...

Cross site scripting

Cross Site Scripting XSS vulnerabiity exists in LavaLite CMS 5.8.0 via the Menu Blocks feature, which can be bypassed by using HTML event handlers, such as "ontoggle,"...

CVE-2020-23234

CVE-2020-23234 affects LavaLite CMS 5.8.0 (Menu Blocks feature) with a Cross-Site Scripting (XSS) vulnerability that can be bypassed using HTML event handlers such as ontoggle. The available connected sources confirm the product, version, and the XSS in this component, along with the described by...

CVE-2020-23234

Cross Site Scripting XSS vulnerabiity exists in LavaLite CMS 5.8.0 via the Menu Blocks feature, which can be bypassed by using HTML event handlers, such as "ontoggle,"...