MEDIUM5.4
GHSA-vv33-27jm-cvxq
Stored XSS in LavaLite 5.8.0
Quick fix
GHSA-vv33-27jm-cvxq — lavalite/cms: upgrade to the fixed version with the command below.
composer require lavalite/cms:^5.8.0Details
A stored cross site scripting (XSS) vulnerability in the /admin/user/team component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter.
Are you affected?
Enter the version of the package you're using.