| Título | Lagom WHMCS Template ≤ 2.4.2 Denial of Service |
|---|
| Descrição | Lagom WHMCS Template Client-Side Denial of Service Vulnerability
The Lagom WHMCS Template bundles an outdated DataTables library containing a critical Denial of Service (DoS) vulnerability.
DataTables Memory Exhaustion: Rapid successive DataTable initializations with large datasets bypass memory bounds checking. The library processes massive row/cell string allocations without garbage collection limits or iteration caps, consuming gigabytes of RAM within seconds and forcing complete browser termination.
The vulnerability requires only JavaScript execution capability and results in immediate, permanent client application denial of service. Attackers can trigger crashes via console access, injected scripts, or chained XSS payloads. |
|---|
| Fonte | ⚠️ https://github.com/devsamuelsantiago/lagom-whmcs-dos-poc |
|---|
| Utilizador | s4nnty (UID 95917) |
|---|
| Submissão | 28/03/2026 15h50 (há 23 dias) |
|---|
| Moderação | 19/04/2026 15h57 (22 days later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 358236 [Lagom WHMCS Template até 2.4.2 Datatables Negação de Serviço] |
|---|
| Pontos | 20 |
|---|