CVE-2019-17434

Published
View on NVD ↗
CVSS v3
5.4
MEDIUM
CVSS v2
3.5
LOW
Affected
1
PROJECT

Description

LavaLite through 5.7 has XSS via a crafted account name that is mishandled on the Manage Clients screen.

LavaLite/cms
LavaLite/cms
Multilingual PHP CMS built with Laravel and bootstrap
GitHubGitHub
2.89K