Gila CMS 1.11.8 allows Unrestricted Upload of a File with a Dangerous Type via .phar or .phtml to the lzld/thumb?src= URI.

Published Jan 6, 2020 · Updated Aug 4, 2024 · Assigned by mitre