Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute arbitrary code and obtain sensitive information via a crafted payload to the URL.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://jinmu1108.github.io/uncategorized/CVE-2024-31828/ | Exploit Third Party Advisory |
| https://jinmu1108.github.io/uncategorized/CVE-2024-31828/ | Exploit Third Party Advisory |
Configurations
History
18 Apr 2025, 18:43
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Lavalite lavalite
Lavalite |
|
| References | () https://jinmu1108.github.io/uncategorized/CVE-2024-31828/ - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:lavalite:lavalite:10.1.0:*:*:*:*:*:*:* |
26 Apr 2024, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-26 22:15
Updated : 2025-04-18 18:43
NVD link : CVE-2024-31828
Mitre link : CVE-2024-31828
JSON object : View
Products Affected
lavalite
- lavalite
CWE
No CWE.