~ / search / GHSA-rvjp-j5j4-c9j5

GHSA-rvjp-j5j4-c9j5

Gila CMS Cross-site Scripting Vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-20523

Packages

EcosystemPackageAffectedFixed in
Packagist gilacms/gila < 1.11.4 1.11.4

Details

As written in the advisory (Markdown source, shown as plain text).

Cross Site Scripting (XSS) vulnerability in `adm_user` parameter in Gila CMS version 1.11.3, allows remote attackers to execute arbitrary code during the Gila CMS installation.

References

External links from the advisory. They lead to third-party sites.