Vulnerabilities and Security Researches

Lava Ajax Search, CVE-2025-28937

CVE, Research URL: CVE-2025-28937
Home page URL: Security reports for Lava Ajax Search
Application: Lava Ajax Search
Published on: Mar 12, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in lavacode Lava Ajax Search allows Stored XSS. This issue affects Lava Ajax Search: from n/a through 1.1.9.
Affected versions: Min -, max 1.1.9.
Status: vulnerable