Vulnerabilities

TI-2026-76807 CVE-2026-113358 · GHSA-mr53-92q8-jc4r

LavaLite CMS Filer routes lack authentication, exposing files

HIGH 77

LavaLite CMS through 10.1.2 contains a missing authentication vulnerability in the Filer module that allows unauthenticated attackers to download stored files through the filer/download and filer/display routes.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00441 Published 2026-10-20 No fix listed CWE-306

TI-2026-70946 CVE-2026-108951 · GHSA-pj48-vpfx-3cj9

Authorization bypass in LavaLite CMS user update API

LOW 31

LavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows authenticated low-privileged users to modify other users' accounts by abusing the AbstractRequest isWorkflow() check.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00302 Published 2026-10-12 No fix listed CWE-863

TI-2025-43153 CVE-2025-70866 · GHSA-38xg-3ffm-68p7

LavaLite CMS 10.1.0 is vulnerable to Incorrect Access Control.

HIGH 73

LavaLite CMS 10.1.0 is vulnerable to Incorrect Access Control.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00492 Published 2026-02-13 No fix listed CWE-284

TI-2025-43317 CVE-2025-71177 · GHSA-w7rq-fgx4-4xcm

LavaLite CMS <= 10.1.0 Stored XSS via Package Creation and Search

MEDIUM 56

LavaLite CMS versions up to and including 10.1.0 contain a stored cross-site scripting vulnerability in the package creation and search functionality.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00223 Published 2026-01-23 No fix listed CWE-79

TI-2024-20956 CVE-2024-31828 · GHSA-5hcr-g32p-h74c

Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute…

LOW 28

Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute arbitrary code and obtain sensitive information via a crafted payload to the URL.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00504 Published 2024-04-26 No fix listed CWE-79

TI-2023-18730 CVE-2023-36984 · GHSA-c4xw-v5fc-4955

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure.

MEDIUM 40

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.007 Published 2023-08-01 No fix listed

TI-2023-18729 CVE-2023-36983 · GHSA-jc2f-gc75-5rj9

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure.

MEDIUM 40

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.007 Published 2023-08-01 No fix listed

TI-2023-14142 CVE-2023-30124 · GHSA-h538-r9x6-rcmc

LavaLite v9.0.0 is vulnerable to Cross Site Scripting (XSS).

LOW 25

LavaLite v9.0.0 is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00384 Published 2023-05-18 No fix listed CWE-79

TI-2023-11992 CVE-2023-27238 · GHSA-6vcf-cfjp-qxcw

LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning.

MEDIUM 50

LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00866 Published 2023-05-12 No fix listed CWE-444

TI-2023-11991 CVE-2023-27237 · GHSA-94q4-v5g6-qp7x

LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack.

LOW 28

LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00592 Published 2023-05-12 No fix listed CWE-79

TI-2022-20443 CVE-2022-42188 · GHSA-cm22-88qr-7ffh

In Lavalite 9.0.0, the XSRF-TOKEN cookie is vulnerable to path traversal attacks…

HIGH 72

In Lavalite 9.0.0, the XSRF-TOKEN cookie is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01154 Published 2022-10-18 No fix listed CWE-22

TI-2020-14492 CVE-2020-23234 · GHSA-v2f3-f8x4-m3w8

Cross Site Scripting (XSS) vulnerabiity exists in LavaLite CMS 5.8.0 via the Menu Blocks…

LOW 23

Cross Site Scripting (XSS) vulnerabiity exists in LavaLite CMS 5.8.0 via the Menu Blocks feature, which can be bypassed by using HTML event handlers, such as "ontoggle,".

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00624 Published 2021-07-26 No fix listed CWE-79

TI-2020-14644 CVE-2020-23700 · GHSA-592v-7frm-h44q

Cross Site Scripting (XSS) vulnerability in LavaLite-CMS 5.8.0 via the Menu Links feature.

LOW 23

Cross Site Scripting (XSS) vulnerability in LavaLite-CMS 5.8.0 via the Menu Links feature.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00589 Published 2021-07-07 No fix listed CWE-79

TI-2020-18648 CVE-2020-36397 · GHSA-3cfg-rxh6-h2rh

A stored cross site scripting (XSS) vulnerability in the /admin/contact/contact component…

LOW 25

A stored cross site scripting (XSS) vulnerability in the /admin/contact/contact component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00517 Published 2021-07-02 No fix listed CWE-79

TI-2020-18647 CVE-2020-36396 · GHSA-gjf5-j475-p4g6

A stored cross site scripting (XSS) vulnerability in the /admin/roles/role component of…

LOW 25

A stored cross site scripting (XSS) vulnerability in the /admin/roles/role component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New"…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.005 Published 2021-07-02 No fix listed CWE-79

TI-2020-18646 CVE-2020-36395 · GHSA-vv33-27jm-cvxq

A stored cross site scripting (XSS) vulnerability in the /admin/user/team component of…

LOW 25

A stored cross site scripting (XSS) vulnerability in the /admin/user/team component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" p…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00512 Published 2021-07-02 Fixed in 5.8.0 CWE-79

TI-2020-17101 CVE-2020-28124 · GHSA-6r6h-vhg7-53x7

Cross Site Scripting (XSS) in LavaLite 5.8.0 via the Address field.

LOW 25

Cross Site Scripting (XSS) in LavaLite 5.8.0 via the Address field.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00516 Published 2021-04-14 Fixed in 7.0.1 CWE-79

TI-2019-13610 CVE-2019-18883 · GHSA-jm58-m23h-rvx8

XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field.

LOW 29

XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00874 Published 2019-11-13 No fix listed CWE-79

TI-2019-13020 CVE-2019-17434 · GHSA-jh3p-6p9x-cmxh

LavaLite through 5.7 has XSS via a crafted account name that is mishandled on the Manage Clients screen.

LOW 25

LavaLite through 5.7 has XSS via a crafted account name that is mishandled on the Manage Clients screen.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00598 Published 2019-10-10 No fix listed CWE-79

TI-2018-11871 CVE-2018-16551 · GHSA-pxxp-283v-xpq5

LavaLite 5.5 has XSS via a /edit URI, as demonstrated by client/job/job/Zy8PWBekrJ/edit.

LOW 26

LavaLite 5.5 has XSS via a /edit URI, as demonstrated by client/job/job/Zy8PWBekrJ/edit.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00667 Published 2018-09-05 No fix listed CWE-79

TI-2017-14677 CVE-2017-1000467 · GHSA-h7vh-6gmm-g7h9

LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within…

LOW 26

LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00734 Published 2018-01-03 No fix listed CWE-79

Vulnerabilities

Filters