In short
- CVE-2020-23234 is a MEDIUM (CVSS 4.8) vulnerability affecting lavalite/cms, lavalite (lavalite).
- Chance of exploitation in the next 30 days (EPSS): 0.62%, higher than 50.0% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
| Package | Affected versions | Patched versions |
|---|
| lavalite/cms Packagist | ≤ 5.8.0
| No fix yet |
| lavalite | = 5.8.0
| No fix yet |
Description
Cross Site Scripting (XSS) vulnerabiity exists in LavaLite CMS 5.8.0 via the Menu Blocks feature, which can be bypassed by using HTML event handlers, such as "ontoggle,".
NVD description
Cross Site Scripting (XSS) vulnerabiity exists in LavaLite CMS 5.8.0 via the Menu Blocks feature, which can be bypassed by using HTML event handlers, such as "ontoggle,".
More vulnerabilities in lavalite/cms
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free