lavalite/cms vulnerabilities (Packagist)

14 vulnerabilities.

• lavalite/cms Packagist LavaLite CMS <= 10.1.0 Stored XSS via Package Creation and Search CVE-2025-71177 5.1 MediumJanuary 23, 2026
• lavalite/cms Packagist Lavalite CMS Cross Site Scripting vulnerability CVE-2024-31828 6.1 MediumApril 26, 2024
• lavalite/cms Packagist LavaLite vulnerable to Cross Site Scripting CVE-2023-30124 5.4 MediumMay 18, 2023
• lavalite/cms Packagist LavaLite vulnerable to web cache poisoning CVE-2023-27238 9.8 CriticalMay 12, 2023
• lavalite/cms Packagist LavaLite CMS vulnerable to host header injection attack CVE-2023-27237 6.1 MediumMay 12, 2023
• lavalite/cms Packagist Lavalite vulnerable to Arbitrary File Read via Directory Traversal CVE-2022-42188 7.5 HighOctober 18, 2022
• lavalite/cms Packagist Cross Site Scripting in LavaLite CMS CVE-2020-23234 4.8 MediumJuly 26, 2021
• lavalite/cms Packagist Cross-site scripting in LavaLite-CMS CVE-2020-23700 4.8 MediumJuly 7, 2021
• lavalite/cms Packagist LavaLite Stored Cross-site Scripting vulnerability CVE-2020-36397 5.4 MediumJuly 2, 2021
• lavalite/cms Packagist Stored XSS in LavaLite 5.8.0 CVE-2020-36396 5.4 MediumJuly 2, 2021
• lavalite/cms Packagist Stored XSS in LavaLite 5.8.0 CVE-2020-36395 Fix available 5.4 MediumJuly 2, 2021
• lavalite/cms Packagist Cross Site Scripting (XSS) in LavaLite 5.8.0 CVE-2020-28124 Fix available 5.4 MediumApril 14, 2021
• lavalite/cms Packagist Stored XSS in LavaLite 5.5 CVE-2018-16551 Fix available 5.4 MediumSeptember 5, 2018
• lavalite/cms Packagist Stored XSS in LavaLite 5.2.4 CVE-2017-1000467 5.4 MediumJanuary 3, 2018