PT-2018-5234
CVE-2017-1000467
·
تاريخ النشر
2018-01-03
·
تاريخ التحديث
2022-05-14
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
LavaLite version 5.2.4
Description
The issue concerns a stored cross-site scripting vulnerability within the blog creation page. This can lead to disruption of service and allow the execution of javascript code.
Recommendations
For LavaLite version 5.2.4, consider disabling the blog creation page until a patch is available to prevent potential exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾