MEDIUM5.4Packagist
GHSA-3cfg-rxh6-h2rh· CVE-2020-36397LavaLite Stored Cross-site Scripting vulnerability
Modified: 2/16/2024
package
Packagist/lavalite/cms
pkg:packagist/lavalite/cms
MEDIUM4.8Packagist
GHSA-592v-7frm-h44q· CVE-2020-23700Cross-site scripting in LavaLite-CMS
Modified: 11/8/2023
MEDIUM6.1Packagist
GHSA-5hcr-g32p-h74c· CVE-2024-31828Lavalite CMS Cross Site Scripting vulnerability
Modified: 7/3/2024
MEDIUM5.4Packagist
GHSA-6r6h-vhg7-53x7· CVE-2020-28124Cross Site Scripting (XSS) in LavaLite 5.8.0
Modified: 2/16/2024
CRITICAL9.8Packagist
GHSA-6vcf-cfjp-qxcw· CVE-2023-27238LavaLite vulnerable to web cache poisoning
Modified: 1/27/2025
MEDIUM6.1Packagist
GHSA-94q4-v5g6-qp7x· CVE-2023-27237LavaLite CMS vulnerable to host header injection attack
Modified: 2/16/2024
HIGH7.5Packagist
GHSA-cm22-88qr-7ffh· CVE-2022-42188Lavalite vulnerable to Arbitrary File Read via Directory Traversal
Modified: 11/8/2023
MEDIUM5.4Packagist
GHSA-gjf5-j475-p4g6· CVE-2020-36396Stored XSS in LavaLite 5.8.0
Modified: 2/16/2024
MEDIUM5.4Packagist
GHSA-h538-r9x6-rcmc· CVE-2023-30124LavaLite vulnerable to Cross Site Scripting
Modified: 2/16/2024
MEDIUM5.4Packagist
GHSA-h7vh-6gmm-g7h9· CVE-2017-1000467Stored XSS in LavaLite 5.2.4
Modified: 2/16/2024
MEDIUM5.4Packagist
GHSA-pxxp-283v-xpq5· CVE-2018-16551Stored XSS in LavaLite 5.5
Modified: 2/16/2024
MEDIUM4.8Packagist
GHSA-v2f3-f8x4-m3w8· CVE-2020-23234Cross Site Scripting in LavaLite CMS
Modified: 2/16/2024
MEDIUM5.4Packagist
GHSA-vv33-27jm-cvxq· CVE-2020-36395Stored XSS in LavaLite 5.8.0
Modified: 2/16/2024
MEDIUMPackagist
GHSA-w7rq-fgx4-4xcm· CVE-2025-71177LavaLite CMS affected by a stored cross-site scripting vulnerability
Modified: 2/3/2026