CVE-2017-1000467
CVE-2017-1000467
This page contains facts from public vulnerability sources. Check the original advisory before updating.
LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code.
CVSS 5.4 · Medium · EPSS 0.7%
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
lavalite/cms Packagist
- Versions
- v5.0.0
- v5.1.0
- v5.1.1
- v5.2.0
- v5.2.1
- v5.2.2
- v5.2.3
- v5.2.4
- Affected ranges
- ECOSYSTEM: ≤ 5.2.4
No fix published