GHSA-vh5j-5fhq-9xwg: Taylor has race condition in /get-patch that allows purchase token replay

GHSA-jfj7-249r-7j2m: TabberNeue vulnerable to Stored XSS through wikitext

GHSA-m435-9v6r-v5f6: MobSF vulnerability allows SSRF due to the allow_redirects=True parameter

GHSA-fv92-fjc5-jj9h: mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data

GHSA-277f-37gw-9gmq: raspap-webgui has a Directory Traversal vulnerability

Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute arbitrary code and obtain sensitive information via a crafted payload to the URL.

**Lavalite CMS Cross Site Scripting vulnerability**

Moderate severity GitHub Reviewed Published Apr 27, 2024 to the GitHub Advisory Database • Updated Apr 30, 2024

Headline

GHSA-5hcr-g32p-h74c: Lavalite CMS Cross Site Scripting vulnerability

ghsa: Latest News