CVE-2019-11456

Gila CMS 1.10.1 allows fm/save CSRF for executing arbitrary PHP code...

PT-2019-12318

Name of the Vulnerable Software and Affected Versions Gila CMS version 1.10.1 Description The issue allows for Cross-Site Request Forgery CSRF in the fm/save endpoint, potentially leading to the execution of arbitrary PHP code. Recommendations For Gila CMS version 1.10.1, update to a version that...

CVE-2019-11456: Cross-Site Request Forgery (CSRF)

Gila CMS 1.10.1 allows fm/save CSRF for executing arbitrary PHP code...