Skip to content
OpenAdvisories

Package · Packagist

lavalite/cms

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2022-42188

    Lavalite vulnerable to Arbitrary File Read via Directory Traversal

    In Lavalite 9.0.0, the XSRF-TOKEN cookie is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server.

    lavalite/cms Packagist