LavaLite through 5.7 has XSS via a crafted account name that is mishandled on the Manage Clients screen.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV