CVE-2018-16551

LavaLite 5.5 has XSS via a /edit URI, as demonstrated by client/job/job/Zy8PWBekrJ/edit.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2018-09-05

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Lavalite (Lavalite)

References

• https://github.com/LavaLite/cms/issues/259