| Título | Lagom WHMCS Template ≤ 2.4.2 Denial of Service |
|---|
| Descripción | Lagom WHMCS Template Client-Side Denial of Service Vulnerability
The Lagom WHMCS Template bundles an outdated DataTables library containing a critical Denial of Service (DoS) vulnerability.
DataTables Memory Exhaustion: Rapid successive DataTable initializations with large datasets bypass memory bounds checking. The library processes massive row/cell string allocations without garbage collection limits or iteration caps, consuming gigabytes of RAM within seconds and forcing complete browser termination.
The vulnerability requires only JavaScript execution capability and results in immediate, permanent client application denial of service. Attackers can trigger crashes via console access, injected scripts, or chained XSS payloads. |
|---|
| Fuente | ⚠️ https://github.com/devsamuelsantiago/lagom-whmcs-dos-poc |
|---|
| Usuario | s4nnty (UID 95917) |
|---|
| Sumisión | 2026-03-28 15:50 (hace 23 días) |
|---|
| Moderación | 2026-04-19 15:57 (22 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 358236 [Lagom WHMCS Template hasta 2.4.2 Datatables denegación de servicio] |
|---|
| Puntos | 20 |
|---|