CVE-2019-18883

XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field.

• CWE-79

• http://packetstormsecurity.com/files/155241/LavaLite-CMS-5.7-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/LavaLite/cms/Third Party Advisory
• http://packetstormsecurity.com/files/155241/LavaLite-CMS-5.7-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/LavaLite/cms/Third Party Advisory

Published

Nov 13, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-18872Weak password requirements in Blaauw Remote Kiln Control thr…7.5
• CVE-2019-18873FUDForum 3.0.9 is vulnerable to Stored XSS via the User-Agen…9
• CVE-2019-18874psutil (aka python-psutil) through 5.6.5 can have a double f…7.5
• CVE-2019-1888A vulnerability in the Administration Web Interface of Cisco…7.2
• CVE-2019-18881WSO2 IS as Key Manager 5.7.0 allows unauthenticated reflecte…6.1
• CVE-2019-18882WSO2 IS as Key Manager 5.7.0 allows stored XSS in download-u…6.1
• CVE-2019-18884index.php/team_members/add_team_member in RISE Ultimate Proj…8.8
• CVE-2019-18885fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a b…5.5
• CVE-2019-18886An issue was discovered in Symfony 4.2.0 to 4.2.11 and 4.3.0…5.3
• CVE-2019-18887An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4…8.1
• CVE-2019-18888An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4…7.5
• CVE-2019-18889An issue was discovered in Symfony 3.4.0 through 3.4.34, 4.2…9.8