The matching condition are not enough. The payload input is not checked for reflection. This creates false positives like this one nuclei -debug -t nuclei-templates/cves/2018/CVE-2018-18069.yaml -u https://empleo.gbtspain.com
* Added tags to cves 😎
easy for viewing / running templates based on years.