Issues

• Security: Team membership modification authorized as create operation (HIGH)

  LavaLite/cms#430 · Filter by author akaiwen opened on Jul 17, 2026

• Security: Unauthenticated file download/upload and guard confusion (2 CRITICAL, 2 HIGH)

  LavaLite/cms#429 · Filter by author lighthousekeeper1212 opened on Mar 6, 2026

• Security contact request

  LavaLite/cms#428 · Filter by author 4ur0n opened on Feb 24, 2026

• Leaking info in website & also broken it is : https://lavalite.org/

  LavaLite/cms#427 · Filter by author RajChowdhury240 opened on Nov 26, 2025

• Stored XSS on Blog that utilized HTML Editor form

  LavaLite/cms#422 · Filter by author Pattharadanai-Sanitjairak opened on Mar 9, 2025

• Demo pages broken on website

  LavaLite/cms#421 · Filter by author vitalijalbu opened on Feb 18, 2025
  1

• A stored XSS

  LavaLite/cms#420 · Filter by author abigowl opened on Jan 27, 2025

• Issue when requesting a demo

  LavaLite/cms#419 · Filter by author agscs opened on Dec 20, 2024

• Broken links on your github page

  LavaLite/cms#418 · Filter by author erdmann040 opened on Dec 15, 2024
  1

• Error in English version lang/app.php

  LavaLite/cms#416 · Filter by author IAmHal9000 opened on Sep 23, 2024

• latest version following official installation steps fails

  LavaLite/cms#414 · Filter by author scottmcdhome opened on Apr 17, 2024

• [feature] can you support postgresql?

  LavaLite/cms#411 · Filter by author zhangmazi opened on Dec 8, 2023
  1

• run 'php artisan lavalite:install' but missing some migration table

  LavaLite/cms#401 · Filter by author jensen0915 opened on Aug 4, 2023
  5

• Vulnerability Report: sXss

  LavaLite/cms#400 · Filter by author Fanxiaoyao66 opened on Jul 30, 2023

• Call to undefined method Litecms\Page\Forms\Page::grouped()

  LavaLite/cms#399 · Filter by author addean opened on Jul 21, 2023

• Class App\Models\User contains 2 abstract methods and must therefore be declared abstract or implement the remaining methods (Litepie\User\Interfaces\UserPolicyInterface::hasRole, Litepie\User\Interfaces\UserPolicyInterface::canDo)

  LavaLite/cms#397 · Filter by author mitAakash opened on Jul 20, 2023
  4

• There is a Stored XSS

  LavaLite/cms#389 · Filter by author 521526 opened on Mar 22, 2023

• Path Traversal Attack

  LavaLite/cms#388 · Filter by author doroniz opened on Oct 19, 2022

• SQLSTATE[42S22]: Column not found: 1054 Unknown column 'slug' in 'where clause' (SQL: select count(*) as aggregate from users where slug = test12345 and users.deleted_at is null)

  LavaLite/cms#386 · Filter by author nakamotojp opened on Sep 21, 2022
  2

• BadMethodCallException: Call to undefined method App\Models\Role::withTrashed() in file /var/www/html/vendor/laravel/framework/src/Illuminate/Support/Traits/ForwardsCalls.php on line 71

  LavaLite/cms#385 · Filter by author loverdeveloper opened on Aug 27, 2022

• Admin test login not work

  LavaLite/cms#384 · Filter by author Nexulo opened on May 28, 2022
  5

• Password hash in Users setting

  LavaLite/cms#380 · Filter by author faisalfs10x opened on Feb 2, 2022
  1

• Stored XSS exists in Blog package of Lavalite CMS v8.1.2

  LavaLite/cms#379 · Filter by author faisalfs10x opened on Feb 2, 2022

• Litecms error on blog pages

  LavaLite/cms#376 · Filter by author melaniecarr23 opened on Jan 25, 2022
  4

• Missing some files

  LavaLite/cms#367 · Filter by author vishnuv93 opened on Sep 22, 2021
  1