PT-2018-5234

CVE-2017-1000467

·

Published

2018-01-03

·

Updated

2022-05-14

Description by

CVSS 3.1
5.4
Medium
MetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions LavaLite version 5.2.4
Description The issue concerns a stored cross-site scripting vulnerability within the blog creation page. This can lead to disruption of service and allow the execution of javascript code.
Recommendations For LavaLite version 5.2.4, consider disabling the blog creation page until a patch is available to prevent potential exploitation.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Related identifiers
CVE-2017-1000467
GHSA-H7VH-6GMM-G7H9
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com