Show filters
16 Total Results
Displaying 1-10 of 16
Sort by:
Attacker Value
Unknown
CVE-2023-36984
Disclosure Date: August 01, 2023 (last updated October 08, 2023)
LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure.
0
Attacker Value
Unknown
CVE-2023-36983
Disclosure Date: August 01, 2023 (last updated October 08, 2023)
LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure.
0
Attacker Value
Unknown
CVE-2023-30124
Disclosure Date: May 18, 2023 (last updated October 08, 2023)
LavaLite v9.0.0 is vulnerable to Cross Site Scripting (XSS).
0
Attacker Value
Unknown
CVE-2023-27238
Disclosure Date: May 12, 2023 (last updated October 08, 2023)
LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning.
0
Attacker Value
Unknown
CVE-2023-27237
Disclosure Date: May 12, 2023 (last updated October 08, 2023)
LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack.
0
Attacker Value
Unknown
CVE-2022-42188
Disclosure Date: October 18, 2022 (last updated October 08, 2023)
In Lavalite 9.0.0, the XSRF-TOKEN cookie is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server.
0
Attacker Value
Unknown
CVE-2020-23234
Disclosure Date: July 26, 2021 (last updated February 23, 2025)
Cross Site Scripting (XSS) vulnerabiity exists in LavaLite CMS 5.8.0 via the Menu Blocks feature, which can be bypassed by using HTML event handlers, such as "ontoggle,".
0
Attacker Value
Unknown
CVE-2020-23700
Disclosure Date: July 07, 2021 (last updated February 23, 2025)
Cross Site Scripting (XSS) vulnerability in LavaLite-CMS 5.8.0 via the Menu Links feature.
0
Attacker Value
Unknown
CVE-2020-36396
Disclosure Date: July 02, 2021 (last updated February 22, 2025)
A stored cross site scripting (XSS) vulnerability in the /admin/roles/role component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter.
0
Attacker Value
Unknown
CVE-2020-36395
Disclosure Date: July 02, 2021 (last updated February 22, 2025)
A stored cross site scripting (XSS) vulnerability in the /admin/user/team component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter.
0
