CVE-2020-23234

Name of the Vulnerable Software and Affected Versions LavaLite CMS version 5.8.0

Description A Cross Site Scripting (XSS) issue exists in the Menu Blocks feature of LavaLite CMS, which can be bypassed by using HTML event handlers, such as ontoggle. This allows for potential malicious script execution.

Recommendations For LavaLite CMS version 5.8.0, consider disabling the Menu Blocks feature until a patch is available to prevent exploitation of the XSS issue. Restrict access to the Menu Blocks feature to minimize the risk of malicious script execution. Avoid using HTML event handlers, such as ontoggle, in the Menu Blocks feature until the issue is resolved.