CVE-2018-18259

Stored XSS has been discovered in version 1.0.12 of the LUYA CMS software via /admin/api-cms-nav/create-page.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-10-15

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Luya Cms (Luya)

References

• http://packetstormsecurity.com/files/149771/LUYA-CMS-1.0.12-Cross-Site-Scripting.html