209 matches found
CVE-2020-28124
Cross Site Scripting XSS in LavaLite 5.8.0 via the Address field...
LavaLite 跨站脚本漏洞
Lavalite is an open source content management system developed using the Laravel framework. A cross-site scripting vulnerability exists in LavaLite version 5.8.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the "address" field...
Lavalite Cross-Site Scripting Vulnerability (CNVD-2020-41526)
Lavalite is an open source PHP-based content management system CMS. A cross-site scripting vulnerability exists in Lavalite version 5.7, which can be exploited to conduct cross-site scripting attacks via the admin/profile name or designation fields...
CVE-2019-18883
XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field...
CVE-2019-18883
XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field...
Cross site scripting
XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field...
CVE-2019-18883
CVE-2019-18883 is a stored XSS in Lavalite CMS version 5.7, exploitable via the admin/profile name or designation field. The root cause is a vulnerability in Lavalite’s web application code that allows injection of JavaScript into profile fields (as demonstrated by the historical exploit examples...
CVE-2019-18883
XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field...
LavaLite CMS 5.7 Cross Site Scripting
Exploit Title: LavaLite CMS - 5.7 - Cross-Site Scripting Date: 09-10-2019 Exploit Author: Ismail Tasdelen Vendor Homepage: https://lavalite.org/ Software Link : https://github.com/LavaLite/cms Software : LavaLite CMS - v 5.7 Version : v 5.7 Vulernability Type : Cross-site Scripting Vulenrability ...
LavaLite Cross-Site Scripting Vulnerability (CNVD-2021-48847)
LavaLite is an open source lightweight content management system CMS. A cross-site scripting vulnerability exists in LavaLite 5.7 and earlier versions, which stems from a lack of proper validation of client-side data in the WEB application and can be exploited by an attacker to execute client-sid...
Cross-site Scripting(XSS)
lavalite/cms is vulnerable to cross-site scripting XSS attack. The attack is possible when a user with admin access privilege can enter arbitrary post requests through the account name in the Manage Clients screen...
CVE-2019-17434
LavaLite through 5.7 has XSS via a crafted account name that is mishandled on the Manage Clients screen...
CVE-2019-17434
LavaLite through 5.7 has XSS via a crafted account name that is mishandled on the Manage Clients screen...
Cross site scripting
LavaLite through 5.7 has XSS via a crafted account name that is mishandled on the Manage Clients screen...
CVE-2019-17434
LavaLite through 5.7 has XSS via a crafted account name that is mishandled on the Manage Clients screen...
CVE-2019-17434
LavaLite CMS ≤ 5.7 is affected by a cross-site scripting (XSS) vulnerability triggered by a crafted account name on the Manage Clients screen. The root cause is mishandling/validation of client-side data in the web application (CVE-2019-17434). Some sources indicate exploitation may require admin...
LavaLite Cross-Site Scripting Vulnerability (CNVD-2018-19424)
LavaLite is an open source lightweight CMS content management system. A cross-site scripting vulnerability exists in LavaLite version 5.5. A remote attacker can use the /edit URI to inject arbitrary Web script or HTML...
Cross-Site Scripting (XSS)
Lavalite/framework is vulnerable to cross-site scripting. A remote attacker is able to inject arbitrary JavaScript into a victim's browser through multiple entries in the edit page...