← All advisories

Medium severity6.1NVD Advisory· Published Oct 15, 2018· Updated Jun 17, 2026

CVE-2018-18259

CVE-2018-18259

Description

Stored XSS has been discovered in version 1.0.12 of the LUYA CMS software via /admin/api-cms-nav/create-page.

Affected products

2

LUYA/LUYA CMSllm-create
Range: =1.0.12
Luyadev/Luya CMSinferred
Range: =1.0.12

Patches

Vulnerability mechanics

References

1

packetstormsecurity.com/files/149771/LUYA-CMS-1.0.12-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.