medium5.4
CVE-2023-30124
LavaLite vulnerable to Cross Site Scripting
Impact
LavaLite v9.0.0 is vulnerable to Cross Site Scripting (XSS).
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | lavalite/cms | <= 9.0.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lavalite | Lavalite | Version 9.0.0 |