Lavacode

3 CVEs across 2 Lavacode products. Browse Lavacode vulnerabilities, severities, and proof-of-concept exploits.

Lavacode products with known CVEs

ProductCVEs
Lava Directory Manager2
Lava Ajax Search1
Lavacode CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-28937Medium5.92025-03-11Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in lavacode Lava Ajax Search lava-ajax-search allows Stored…
CVE-2023-47659Medium6.52023-11-14Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Lavacode Lava Directory Manager plugin <= 1.1.34 versions.
CVE-2023-46081High7.12023-10-26Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Lavacode Lava Directory Manager plugin <= 1.1.34 versions.