Vulnerabilities in LavaLite

3 results
CVE-2026-113358HIGHLavaLite CMS through 10.1.2 Missing Authentication via Filer Download RoutesEPSS 0.4%CVE-2026-108951HIGHLavaLite CMS through 10.1.2 Authorization Bypass via User Update APIEPSS 0.3%CVE-2025-71177MEDIUMLavaLite CMS <= 10.1.0 Stored XSS via Package Creation and SearchEPSS 0.2%