CVE-2018-18259

CVE-2018-18259 : LUYA CMS version 1.0.12 is affected by a Stored XSS vulnerability exploitable via the administrative endpoint /admin/api-cms-nav/create-page. Public sources describe an XSS payload that can be injected through this URL, enabling arbitrary script/HTML execution in an authenticated...