Description
LavaLite 5.5 has XSS via a /edit URI, as demonstrated by client/job/job/Zy8PWBekrJ/edit.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | lavalite/cms | all versions | — | GHSA-pxxp-283v-xpq5 |
Medium · 5.4
CVE-2018-16551
EUVD-2022-4857GHSA-pxxp-283v-xpq5
Stored XSS in LavaLite 5.5
Published Sep 5, 2018 · Updated Aug 5, 2024 · Assigned by mitre