Cross Site Scripting Vulnerability Allows Arbitrary Code Execution and Sensitive Information Theft
CVE-2024-31828

6.1MEDIUM

Key Information:

Vendor

Lavalite CMS

Status
Lavalite
Vendor
CVE Published:
26 April 2024

What is CVE-2024-31828?

Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute arbitrary code and obtain sensitive information via a crafted payload to the URL.

References

https://jinmu1108.github.io/uncategorized/CVE-2024-31828/

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

.