Lavalite CMS Cross Site Scripting vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-31828 · ADVISORY
• LavaLite/cms · PACKAGE
• jinmu1108.github.io/uncategorized/CVE-2024-31828 · WEB
• jinmu1108.github.io/uncategorized/CVE-2024-31828 · Exploit

lavalite/cms のその他の脆弱性

• CVE-2025-71177中 5.4LavaLite CMS versions up to and including 10.1.0 contain a stored cross-site scripting vulnerability in the package creation and search func…
• CVE-2023-30124中 5.4LavaLite v9.0.0 is vulnerable to Cross Site Scripting (XSS).
• CVE-2023-27238緊急 9.8LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning.
• CVE-2023-27237中 6.1LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack.
• CVE-2022-42188高 7.5In Lavalite 9.0.0, the XSRF-TOKEN cookie is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server.