CVE-2018-16551: Lavalite

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

LavaLite 5.5 has XSS via a /edit URI, as demonstrated by client/job/job/Zy8PWBekrJ/edit.

Affected products

• Lavalite Lavalite: version 5.5.0 only

Published 2018-09-05. Last modified 2026-06-17.