Luya

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Luya records in CISA KEV

No Luya vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Luya Cms 1 record LOW Yii-helpers 1 record LOW

Records

2 records

TI-2022-01416 CVE-2022-1544 · GHSA-f9p3-h6cg-2cjr

Formula Injection/CSV Injection due to Improper Neutralization of Formula Elements in CSV File in luyadev/yii-helpers

LOW 39

Formula Injection/CSV Injection due to Improper Neutralization of Formula Elements in CSV File in GitHub repository luyadev/yii-helpers prior to 1.2.1.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02378 Published 2022-05-01 Fixed in 1.2.1 CWE-1236

TI-2018-12907 CVE-2018-18259 · GHSA-h7hf-q55c-77v2

Stored XSS has been discovered in version 1.0.12 of the LUYA CMS software via /admin/api-cms-nav/create-page.

LOW 29

Stored XSS has been discovered in version 1.0.12 of the LUYA CMS software via /admin/api-cms-nav/create-page.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00978 Published 2018-10-15 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0