Luya

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Luya records in CISA KEV

No Luya vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Luya Cms · all components

TI-2018-12907 CVE-2018-18259 · GHSA-h7hf-q55c-77v2

LOW 29

Stored XSS has been discovered in version 1.0.12 of the LUYA CMS software via /admin/api-cms-nav/create-page.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00978 Published 2018-10-15 No fix listed CWE-79