GCVE - cpe:2.3:a:lavalite:lavalite:9.0.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:lavalite:lavalite:9.0.0:*:*:*:*:*:*:*

part: a version: 9.0.0 update: *

Vendor	Lavalite (`77663168-eb76-5ecc-9be6-0ccf6ea1c37e`)
Product	Lavalite (`65714fe1-c993-5494-8dee-2901b9fcd915`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/lavalite/cms`	purl2cpe	2026-06-01 10:16:40.639444
`pkg:sourceforge/lavalite.mirror`	purl2cpe	2026-06-01 10:16:40.639446

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-36984`	vulnerable	2026-06-08 06:08:14.750706	Details available LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure. Published: 2023-08-01T00:00:00.000Z Updated: 2024-10-17T20:24:06.513Z Open on db.gcve.eu Reference links https://github.com/LavaLite/cms https://github.com/M19O/Security-Advisories/tree/main/CVE-2023-36984	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-36983`	vulnerable	2026-06-08 06:08:14.750309	Details available LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure. Published: 2023-08-01T00:00:00.000Z Updated: 2024-10-17T20:25:06.736Z Open on db.gcve.eu Reference links https://github.com/LavaLite/cms https://github.com/M19O/Security-Advisories/tree/main/CVE-2023-36983	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-30124`	vulnerable	2026-06-08 06:02:43.847354	Details available LavaLite v9.0.0 is vulnerable to Cross Site Scripting (XSS). Published: 2023-05-18T00:00:00.000Z Updated: 2025-01-23T19:48:55.743Z Open on db.gcve.eu Reference links https://github.com/LavaLite/cms/issues/389#issue-1636041104	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-27238`	vulnerable	2026-06-08 05:57:40.737771	Details available LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning. Published: 2023-05-12T00:00:00.000Z Updated: 2025-01-27T16:27:47.903Z Open on db.gcve.eu Reference links https://github.com/LavaLite/cms/blob/c0a36dd748c8f7ff53eb16eb572bdeebe72eb420/app/Http/Controllers/ResourceController.php#L8 https://github.com/M19O/Security-Advisories/tree/main/CVE-2023-27238	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-27237`	vulnerable	2026-06-08 05:57:40.737346	Details available LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack. Published: 2023-05-12T00:00:00.000Z Updated: 2026-07-09T00:24:37.788Z Open on db.gcve.eu Reference links https://i.ibb.co/34DSW7B/1.png https://i.ibb.co/kSkqPhQ/3.png https://i.ibb.co/mJq9CH8/2.png https://github.com/M19O/Security-Advisories/tree/main/CVE-2023-27237	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-42188`	vulnerable	2026-06-08 05:49:29.559778	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.