Description
LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | lavalite/cms | <= 9.0.0 | — | GHSA-94q4-v5g6-qp7x |
Medium · 6.1
CVE-2023-27237
EUVD-2023-1507GHSA-94q4-v5g6-qp7x
LavaLite CMS vulnerable to host header injection attack
Published May 12, 2023 · Updated Jul 9, 2026 · Assigned by mitre