4 matches found
Gila CMS Cross-Site Scripting Vulnerability (CNVD-2019-36960)
Gila CMS is an open source content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in gila-blog and gila-mag in Gila CMS 1.11.4 and earlier versions. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An...
9.3CVSS6.4AI score0.02013EPSS
SaveExploits1References1
CVE-2019-17535
Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647...
9.3CVSS6.5AI score0.02013EPSS
SaveExploits1References2
20