Filtered by vendor Luya Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2018-18259 1 Luya 1 Luya Cms 2024-08-05 N/A
Stored XSS has been discovered in version 1.0.12 of the LUYA CMS software via /admin/api-cms-nav/create-page.
CVE-2022-1544 1 Luya 1 Yii-helpers 2024-08-03 7.8 High
Formula Injection/CSV Injection due to Improper Neutralization of Formula Elements in CSV File in GitHub repository luyadev/yii-helpers prior to 1.2.1. Successful exploitation can lead to impacts such as client-sided command injection, code execution, or remote ex-filtration of contained confidential data.