CVE-2020-28124: XSS
Published Apr 14, 2021
·Updated
Cross Site Scripting (XSS) in LavaLite 5.8.0 via the Address field.
Affected Software
1 affected component
Lavalite LavaLite=5.8.0
Event History
Apr 14, 2021
CVE Published
via MITRE·05:04 PM
Data Sourced
via MITRE·05:04 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-28124?
CVE-2020-28124 has been classified as a moderate severity vulnerability due to the potential for Cross Site Scripting (XSS) attacks.
2
How do I fix CVE-2020-28124?
To fix CVE-2020-28124, ensure you validate and sanitize user inputs in the Address field of LavaLite 5.8.0.
3
What systems are affected by CVE-2020-28124?
CVE-2020-28124 specifically affects LavaLite version 5.8.0.
4
Can CVE-2020-28124 lead to data theft?
Yes, if exploited, CVE-2020-28124 could allow an attacker to execute malicious scripts in the context of the user's session, potentially leading to data theft.
5
Is there a patch available for CVE-2020-28124?
As of now, there is no official patch for CVE-2020-28124; the recommended fix is to implement input validation and sanitization.