Cross Site Scripting (XSS) in LavaLite 5.8.0

Description

References

• nvd.nist.gov/vuln/detail/CVE-2020-28124 · ADVISORY
• 418sec/cms#1 · WEB
• LavaLite/cms#339 · WEB
• LavaLite/cms#339 · WEB
• 418sec/huntr · Exploit

Weitere Schwachstellen in lavalite/cms

• CVE-2025-71177MITTEL 5.4LavaLite CMS versions up to and including 10.1.0 contain a stored cross-site scripting vulnerability in the package creation and search func…
• CVE-2024-31828MITTEL 6.1Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute arbitrary code and obtain sensitive information via …
• CVE-2023-30124MITTEL 5.4LavaLite v9.0.0 is vulnerable to Cross Site Scripting (XSS).
• CVE-2023-27238KRITISCH 9.8LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning.
• CVE-2023-27237MITTEL 6.1LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack.