Lucene search
Veracode Vulnerability DatabaseVERACODE:25489HistoryMay 26, 2020 - 9:05 a.m.
Cross-site Scripting (XSS)
2020-05-2609:05:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.01 Low
EPSS
Percentile
84.0%
gilacms/gila is vulnerable to cross-site scripting (XSS). The attack exists because the admin/content/postcategory id parameter is not sanitized properly for g_preview_theme.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gilacms/gila | le | 1.11.5 | |
| gilacms/gila | le | 1.11.5 |
Related
cve
cve
CVE-2019-20803
2020-05-21 22:15:09
prion
prion
Cross site scripting
2020-05-21 22:15:00
nvd
nvd
CVE-2019-20803
2020-05-21 22:15:09
cvelist
cvelist
CVE-2019-20803
2020-05-21 21:51:11
zdt
zdt
packetstorm
packetstorm
GilaCMS 1.11.5 Cross Site Request Forgery / Cross Site Scripting
2020-06-23 00:00:00