Security
فارسی
All products

lavalite/cms

Composer · Package
14 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
LavaLite CMS affected by a stored cross-site scripting vulnerabilityCVE-2025-71177 · GHSA-W7RQ-FGX4-4XCM lavalite/cms Composer Medium No fix reported
LavaLite vulnerable to web cache poisoning CVE-2023-27238 · GHSA-6VCF-CFJP-QXCW lavalite/cms Composer Critical No fix reported
Lavalite CMS Cross Site Scripting vulnerabilityCVE-2024-31828 · GHSA-5HCR-G32P-H74C lavalite/cms Composer Medium No fix reported
Cross Site Scripting (XSS) in LavaLite 5.8.0CVE-2020-28124 · GHSA-6R6H-VHG7-53X7 lavalite/cms Composer Medium Fix reported
Cross Site Scripting in LavaLite CMSCVE-2020-23234 · GHSA-V2F3-F8X4-M3W8 lavalite/cms Composer Medium No fix reported
LavaLite Stored Cross-site Scripting vulnerabilityCVE-2020-36397 · GHSA-3CFG-RXH6-H2RH lavalite/cms Composer Medium No fix reported
Stored XSS in LavaLite 5.2.4CVE-2017-1000467 · GHSA-H7VH-6GMM-G7H9 lavalite/cms Composer Medium No fix reported
Stored XSS in LavaLite 5.8.0CVE-2020-36395 · GHSA-VV33-27JM-CVXQ lavalite/cms Composer Medium Fix reported
Stored XSS in LavaLite 5.5CVE-2018-16551 · GHSA-PXXP-283V-XPQ5 lavalite/cms Composer Medium No fix reported
LavaLite vulnerable to Cross Site ScriptingCVE-2023-30124 · GHSA-H538-R9X6-RCMC lavalite/cms Composer Medium No fix reported
Stored XSS in LavaLite 5.8.0CVE-2020-36396 · GHSA-GJF5-J475-P4G6 lavalite/cms Composer Medium No fix reported
LavaLite CMS vulnerable to host header injection attackCVE-2023-27237 · GHSA-94Q4-V5G6-QP7X lavalite/cms Composer Medium No fix reported
Lavalite vulnerable to Arbitrary File Read via Directory TraversalCVE-2022-42188 · GHSA-CM22-88QR-7FFH lavalite/cms Composer High No fix reported
Cross-site scripting in LavaLite-CMSCVE-2020-23700 · GHSA-592V-7FRM-H44Q lavalite/cms Composer Medium No fix reported