CVE-2019-20803

Gila CMS before 1.11.6 has reflected XSS via the admin/content/postcategory id parameter, which is mishandled for gpreviewtheme...

Cross-site Scripting (XSS)

gilacms/gila is vulnerable to cross-site scripting XSS. The attack exists because the admin/content/postcategory id parameter is not sanitized properly for gpreviewtheme...

CVE-2019-20803

Gila CMS before 1.11.6 has reflected XSS via the admin/content/postcategory id parameter, which is mishandled for gpreviewtheme...

CVE-2019-20803

Gila CMS before 1.11.6 has reflected XSS via the admin/content/postcategory id parameter, which is mishandled for gpreviewtheme...

Cross site scripting

Gila CMS before 1.11.6 has reflected XSS via the admin/content/postcategory id parameter, which is mishandled for gpreviewtheme...

CVE-2019-20803

CVE-2019-20803 concerns Gila CMS, where versions before 1.11.6 are vulnerable to reflected XSS via the admin/content/postcategory id parameter mishandled for g_preview_theme. The Red Hat and other connected records corroborate the same description. Affected component: the post category handling e...

CVE-2019-20803

Gila CMS before 1.11.6 has reflected XSS via the admin/content/postcategory id parameter, which is mishandled for gpreviewtheme...

CVE-2019-20803

Gila CMS before 1.11.6 has reflected XSS via the admin/content/postcategory id parameter, which is mishandled for gpreviewtheme...

PT-2020-10773 · Gila · Gila Cms

Name of the Vulnerable Software and Affected Versions: Gila CMS versions prior to 1.11.6 Description: The issue is related to reflected XSS, which occurs via the id parameter in the admin/content/postcategory endpoint. This parameter is mishandled when g preview theme is used. Recommendations: Fo...

CVE-2019-20803: Improper Neutralization of Input During Web Page Generation

Gila CMS before 1.11.6 has reflected XSS via the admin/content/postcategory id parameter, which is mishandled for gpreviewtheme...