Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in SpabRice Nyla allows Code Injection.
This issue affects Nyla: from n/a through 1.7.
Credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
