CVE-2017-1000467: XSS

Published Jan 3, 2018

Updated

LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code.

Affected Software

1 affected component

Lavalite LavaLite=5.2.4

Event History

Jan 3, 2018

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2017-1000467?

CVE-2017-1000467 is categorized as a medium severity vulnerability due to its potential impact on user data and service integrity.

What type of vulnerability is CVE-2017-1000467?

CVE-2017-1000467 is a stored cross-site scripting vulnerability that affects the blog creation page in LavaLite version 5.2.4.

How do I fix CVE-2017-1000467?

To fix CVE-2017-1000467, it is recommended to update LavaLite to a version that addresses this vulnerability and sanitize user inputs on the blog creation page.

What are the effects of exploiting CVE-2017-1000467?

Exploiting CVE-2017-1000467 can lead to the execution of malicious JavaScript code, which can disrupt services and compromise user data.

Which version of LavaLite is affected by CVE-2017-1000467?

LavaLite version 5.2.4 is the only version identified as vulnerable to CVE-2017-1000467.