CVE-2019-20803
Gila CMS before 1.11.6 has reflected XSS via the admin/content/postcategory id parameter, which is mishandled for g_preview_theme.
- Affected products
- Gila Cms
- Gilacms Gila Cms
- < 1.11.6
- Fix
- Available
- CVSS 3.1
- 6.1 MEDIUM
- EPSS
- 1.8% (77th percentile)
- Weakness
- CWE-79
- NVD status
- Modified
- Published
- 2020-05-21
CVE-2019-20803 at NVD
2 known exploits for CVE-2019-20803
Proof-of-concept code and exploit modules indexed by Sploitus