medium5.9
CVE-2025-28937
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in lavacode Lava Ajax Search lava-ajax-search allows Stored …
Impact
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in lavacode Lava Ajax Search lava-ajax-search allows Stored XSS.This issue affects Lava Ajax Search: from n/a through <= 1.1.9.
Affected products
| Product | Affected versions |
|---|---|
| Lava Ajax Search: From N/A Through | through 1.1.9. |
Versions were read from the advisory text. No structured product data has been published for this record yet.