lavalite/cms Security Advisories for v9.0.0 (4)
-
[MEDIUM] LavaLite vulnerable to Cross Site Scripting
PKSA-4nfv-7qwv-ggym CVE-2023-30124 GHSA-h538-r9x6-rcmc
Affected version: <=9.0.0
Reported by:
GitHub -
[MEDIUM] LavaLite CMS vulnerable to host header injection attack
PKSA-g6vf-n3m4-m9qn CVE-2023-27237 GHSA-94q4-v5g6-qp7x
Affected version: <=9.0.0
Reported by:
GitHub -
[CRITICAL] LavaLite vulnerable to web cache poisoning
PKSA-zzjm-3hfj-k9w1 CVE-2023-27238 GHSA-6vcf-cfjp-qxcw
Affected version: <=9.0.0
Reported by:
GitHub -
[HIGH] Lavalite vulnerable to Arbitrary File Read via Directory Traversal
PKSA-fsmt-mc91-tyv1 CVE-2022-42188 GHSA-cm22-88qr-7ffh
Affected version: =9.0.0
Reported by:
GitHub