Cristián Lávaque vulnerabilities
We track 4 vulnerabilities in Cristián Lávaque products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2025.
Latest Cristián Lávaque vulnerabilities
- 9.8 Critical severity
s2Member: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in Cristián Lávaque s2Member s2member allows Object Injection.This issue affects s2Member: from n/a through <= 250701.
- 9.0 Critical severity
s2Member: Improper Control of Generation of Code
Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member s2member.This issue affects s2Member: from n/a through 250905.
- 7.1 High severity
s2Member: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cristián Lávaque s2Member s2member allows Reflected XSS.This issue affects s2Member: from n/a through <= 241216.
- 9.0 Critical severity
s2Member: Improper Control of Generation of Code
Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member s2member allows Code Injection.This issue affects s2Member: from n/a through <= 241114.