GHSA-74q2-6jp4-3rqq: Krayin CRM vulnerable to Cross Site Scripting (XSS) via the organization name

GHSA-632q-77qj-c89q: LimeSurvey Cross Site Scripting vulnerability

GHSA-c7xm-rwqj-pgcj: LimeSurvey Cross Site Scripting vulnerability

GHSA-6hwr-6v2f-3m88: XXE in PHPSpreadsheet's XLSX reader

GHSA-r8w8-74ww-j4wh: PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via JavaScript hyperlinks

Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute arbitrary code and obtain sensitive information via a crafted payload to the URL.

**Lavalite CMS Cross Site Scripting vulnerability**

Moderate severity GitHub Reviewed Published Apr 27, 2024 to the GitHub Advisory Database • Updated Apr 30, 2024

Headline

GHSA-5hcr-g32p-h74c: Lavalite CMS Cross Site Scripting vulnerability

ghsa: Latest News