CVE-2018-18259: Improper Neutralization of Input During Web Page Generation

Stored XSS has been discovered in version 1.0.12 of the LUYA CMS software via /admin/api-cms-nav/create-page...

PT-2018-14385

Name of the Vulnerable Software and Affected Versions LUYA CMS version 1.0.12 Description A Stored XSS issue has been found in the software. The issue can be exploited via the "/admin/api-cms-nav/create-page" API endpoint. Recommendations For version 1.0.12, consider disabling access to the...