CVE-2018-18259

Stored XSS has been discovered in version 1.0.12 of the LUYA CMS software via /admin/api-cms-nav/create-page...

CVE-2018-18259

CVE-2018-18259 : LUYA CMS version 1.0.12 is affected by a Stored XSS vulnerability exploitable via the administrative endpoint /admin/api-cms-nav/create-page. Public sources describe an XSS payload that can be injected through this URL, enabling arbitrary script/HTML execution in an authenticated...

LUYA CMS 1.0.12 Cross Site Scripting

Exploit Title: LUYA CMS 1.0.12 - Cross-Site Scripting Date: 2018-10-11 Exploit Author: Ismail Tasdelen Vendor Homepage: https://luya.io/ Software Link : https://github.com/luyadev/luya/ Software : LUYA CMS Version : 1.0.12 Vulernability Type : Cross-site Scripting Vulenrability : Stored XSS CVE :...