What’s Vulnerable › Vulnerabilities

CVE-2023-27237

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-05-12 · updated 2026-07-09
• Weakness: CWE-79

Description

LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack.

Affected products

• LavaLite CMS: 9.0.0

References

• https://github.com/M19O/Security-Advisories/tree/main/CVE-2023-27237
• https://i.ibb.co/34DSW7B/1.png
• https://i.ibb.co/kSkqPhQ/3.png
• https://i.ibb.co/mJq9CH8/2.png
• https://github.com/M19O/Security-Advisories/tree/main/CVE-2023-27237
• https://i.ibb.co/34DSW7B/1.png
• https://i.ibb.co/kSkqPhQ/3.png
• https://i.ibb.co/mJq9CH8/2.png

Get alerted when CVE-2023-27237 or the next vulnerability affects your stack