Approved changes feed: RSS · Atom

cpe:2.3:a:lavalite:lavalite:5.2.4:*:*:*:*:*:*:*

part: a version: 5.2.4 update: *

VendorLavalite (77663168-eb76-5ecc-9be6-0ccf6ea1c37e)
ProductLavalite (65714fe1-c993-5494-8dee-2901b9fcd915)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/lavalite/cms purl2cpe 2026-06-01 10:16:40.639349
pkg:sourceforge/lavalite.mirror purl2cpe 2026-06-01 10:16:40.639351

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1000467 vulnerable 2026-06-08 05:08:34.586996 Details available
LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code.
Published: 2018-01-03T15:00:00.000Z
Updated: 2024-09-17T02:31:52.725Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.