CVE-2020-23234 | BDVDB-2026-157648 Detail

Description#

Cross Site Scripting (XSS) vulnerabiity exists in LavaLite CMS 5.8.0 via the Menu Blocks feature, which can be bypassed by using HTML event handlers, such as "ontoggle,".

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/LavaLite/cms/issues/320

Exploit#

No public exploit known

History#

Version 12021-07-26Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.