CVE-2019-20804
Gila CMS before 1.11.6 allows CSRF with resultant XSS via the admin/themes URI, leading to compromise of the admin account.
- Affected products
- Gila Cms
- Gilacms Gila Cms
- < 1.11.6
- Fix
- Available
- CVSS 3.1
- 8.8 HIGH
- EPSS
- 1.1% (63th percentile)
- Weakness
- CWE-352
- NVD status
- Modified
- Published
- 2020-05-21
CVE-2019-20804 at NVD
2 known exploits for CVE-2019-20804
Proof-of-concept code and exploit modules indexed by Sploitus