[MEDIUM] LavaLite CMS affected by a stored cross-site scripting vulnerability

PKSA-2q69-6cxz-6fkx CVE-2025-71177 GHSA-w7rq-fgx4-4xcm

Affected version: <=10.1.0

Reported by:
GitHub

[MEDIUM] LavaLite vulnerable to Cross Site Scripting

PKSA-4nfv-7qwv-ggym CVE-2023-30124 GHSA-h538-r9x6-rcmc

Affected version: <=9.0.0

Reported by:
GitHub

[MEDIUM] LavaLite CMS vulnerable to host header injection attack

PKSA-g6vf-n3m4-m9qn CVE-2023-27237 GHSA-94q4-v5g6-qp7x

Affected version: <=9.0.0

Reported by:
GitHub

[CRITICAL] LavaLite vulnerable to web cache poisoning

PKSA-zzjm-3hfj-k9w1 CVE-2023-27238 GHSA-6vcf-cfjp-qxcw

Affected version: <=9.0.0

Reported by:
GitHub

[HIGH] Lavalite vulnerable to Arbitrary File Read via Directory Traversal

PKSA-fsmt-mc91-tyv1 CVE-2022-42188 GHSA-cm22-88qr-7ffh

Affected version: =9.0.0

Reported by:
GitHub