CVE-2024-31828

Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute arbitrary code and obtain sensitive information via a crafted payload to the URL.

Published: Apr 27, 2024
Updated: May 4, 2025
CVE: CVE-2024-31828
GHSA: GHSA-5hcr-g32p-h74c
Severity: Medium
Exploit:

CVSS v3:

Severity: Unknown
Score:
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
lavalite / cms	10.1.0	10.1.0.x
lavalite / lavalite	10.1.0	10.1.0.x

https://jinmu1108.github.io/uncategorized/CVE-2024-31828
https://jinmu1108.github.io/uncategorized/CVE-2024-31828/

Vulnerability Database

CVE-2024-31828