XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field.
lavalite lavalite 5.7.0