Skip to content
OpenAdvisories

Package · Packagist

gilacms/gila

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2020-20726

    GilaCMS Cross Site Request Forgery vulnerability

    Cross Site Request Forgery vulnerability in Gila GilaCMS v.1.11.4 allows a remote attacker to execute arbitrary code via the cm/update_rows/user parameter.

    gilacms/gila Packagist
  • High 8.8
    CVE-2020-20693

    Cross-Site Request Forgery in GilaCMS

    A Cross-Site Request Forgery (CSRF) in GilaCMS v1.11.4 allows authenticated attackers to arbitrarily add administrator accounts.

    gilacms/gila Packagist