A vulnerability labeled as problematic has been found in LavaLite CMS up to 10.1.0. This affects an unknown function. The manipulation results in cross site scripting.
This vulnerability is reported as CVE-2025-71177. The attack can be launched remotely. No exploit exists.
