CVE-2020-20695

A stored cross-site scripting XSS vulnerability in GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file...

CVE-2020-20695

GilaCMS v1.11.4 is affected by a stored XSS vulnerability in the SVG handling, allowing an attacker to execute arbitrary web scripts or HTML via a crafted SVG file. This CVE (CVE-2020-20695) is corroborated by multiple connected advisories and national/third-party vulnerability entries (e.g., GHS...