Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute arbitrary code and obtain sensitive information via a crafted payload to the URL.
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')