medium5.4
CVE-2019-17434
LavaLite through 5.7 has XSS via a crafted account name that is mishandled on the Manage Clients screen.
Impact
LavaLite through 5.7 has XSS via a crafted account name that is mishandled on the Manage Clients screen.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lavalite | Lavalite | through 5.7.0 |