medium5.4
CVE-2018-16551
Stored XSS in LavaLite 5.5
Impact
LavaLite 5.5 has XSS via a `/edit` URI, as demonstrated by `client/job/job/Zy8PWBekrJ/edit`.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | lavalite/cms | < 5.5 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lavalite | Lavalite | Version 5.5.0 |