Skip to content
OpenAdvisories

Product · lavalite

LavaLite CMS

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2025-71177

    LavaLite CMS <= 10.1.0 Stored XSS via Package Creation and Search

    LavaLite CMS versions up to and including 10.1.0 contain a stored cross-site scripting vulnerability in the package creation and search functionality. Authenticated users can supply crafted HTML or JavaScript in the package Name or Description fields that is …

    lavalite LavaLite CMS lavalite/cms Packagist