CVE-2025-70866高 8.8LavaLite CMS 10.1.0 is vulnerable to Incorrect Access Control. An authenticated user with low-level privileges (User role) can directly acce…
CVE-2025-71177中 5.4LavaLite CMS versions up to and including 10.1.0 contain a stored cross-site scripting vulnerability in the package creation and search func…
CVE-2024-31828中 6.1Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute arbitrary code and obtain sensitive information via …
CVE-2023-36983高 7.5LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure.
CVE-2023-30124中 5.4LavaLite v9.0.0 is vulnerable to Cross Site Scripting (XSS).