İçeriğe atla
Noroxi

LavaLite kayıtları

lavalite üreticisine ait 19 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%10,5
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 21
  4. 22
  5. 23
  6. 24
  7. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

19 kayıt
  • CVE-2023-27238
    39İzleyin

    LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning.

    KritikCVSS 9,8İstismar yokEPSS %1

    lavalite · lavalite12 May 2023

  • CVE-2025-70866
    35İzleyin

    LavaLite CMS 10.1.0 is vulnerable to Incorrect Access Control.

    YüksekCVSS 8,8İstismar yokEPSS %0

    lavalite · lavalite13 Şub 2026

  • CVE-2022-42188
    30İzleyin

    In Lavalite 9.0.0, the XSRF-TOKEN cookie is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server.

    YüksekCVSS 7,5İstismar yokEPSS %1

    lavalite · lavalite18 Eki 2022

  • CVE-2023-36984
    30İzleyin

    LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure.

    YüksekCVSS 7,5İstismar yokEPSS %1

    lavalite · lavalite31 Tem 2023

  • CVE-2023-36983
    30İzleyin

    LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure.

    YüksekCVSS 7,5İstismar yokEPSS %1

    lavalite · lavalite31 Tem 2023

  • CVE-2019-18883
    24İzleyin

    XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field.

    OrtaCVSS 6,1İstismar yokEPSS %1

    lavalite · lavalite13 Kas 2019

  • CVE-2023-27237
    24İzleyin

    LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack.

    OrtaCVSS 6,1İstismar yokEPSS %1

    lavalite · lavalite12 May 2023

  • CVE-2024-31828
    24İzleyin

    Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute arbitrary code and obtain sensitive information via

    OrtaCVSS 6,1İstismar yokEPSS %1

    lavalite · lavalite26 Nis 2024

  • CVE-2017-1000467
    21İzleyin

    LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disrup

    OrtaCVSS 5,4İstismar yokEPSS %1

    lavalite · lavalite3 Oca 2018

  • CVE-2018-16551
    21İzleyin

    LavaLite 5.5 has XSS via a /edit URI, as demonstrated by client/job/job/Zy8PWBekrJ/edit.

    OrtaCVSS 5,4İstismar yokEPSS %1

    lavalite · lavalite5 Eyl 2018

  • CVE-2019-17434
    21İzleyin

    LavaLite through 5.7 has XSS via a crafted account name that is mishandled on the Manage Clients screen.

    OrtaCVSS 5,4İstismar yokEPSS %1

    lavalite · lavalite10 Eki 2019

  • CVE-2020-28124
    21İzleyin

    Cross Site Scripting (XSS) in LavaLite 5.8.0 via the Address field.

    OrtaCVSS 5,4İstismar yokEPSS %1

    lavalite · lavalite14 Nis 2021

  • CVE-2020-36397
    21İzleyin

    A stored cross site scripting (XSS) vulnerability in the /admin/contact/contact component of LavaLite 5.8.0 allows authenticated attackers t

    OrtaCVSS 5,4İstismar yokEPSS %1

    lavalite · lavalite2 Tem 2021

  • CVE-2020-36395
    21İzleyin

    A stored cross site scripting (XSS) vulnerability in the /admin/user/team component of LavaLite 5.8.0 allows authenticated attackers to exec

    OrtaCVSS 5,4İstismar yokEPSS %1

    lavalite · lavalite2 Tem 2021

  • CVE-2020-36396
    21İzleyin

    A stored cross site scripting (XSS) vulnerability in the /admin/roles/role component of LavaLite 5.8.0 allows authenticated attackers to exe

    OrtaCVSS 5,4İstismar yokEPSS %1

    lavalite · lavalite2 Tem 2021

  • CVE-2023-30124
    21İzleyin

    LavaLite v9.0.0 is vulnerable to Cross Site Scripting (XSS).

    OrtaCVSS 5,4İstismar yokEPSS %0

    lavalite · lavalite17 May 2023

  • CVE-2025-71177
    20İzleyin

    LavaLite CMS <= 10.1.0 Stored XSS via Package Creation and Search

    OrtaCVSS 5,1İstismar yokEPSS %0

    lavalite · lavalite23 Oca 2026

  • CVE-2020-23234
    19İzleyin

    Cross Site Scripting (XSS) vulnerabiity exists in LavaLite CMS 5.8.0 via the Menu Blocks feature, which can be bypassed by using HTML event

    OrtaCVSS 4,8İstismar yokEPSS %1

    lavalite · lavalite26 Tem 2021

  • CVE-2020-23700
    19İzleyin

    Cross Site Scripting (XSS) vulnerability in LavaLite-CMS 5.8.0 via the Menu Links feature.

    OrtaCVSS 4,8İstismar yokEPSS %1

    lavalite · lavalite7 Tem 2021