Description
A Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. An attacker can use this to steal cookies, passwords or to run arbitrary code on a victim's browser.
Unscored
CVE-2021-39486
EUVD-2021-25843GHSA-pwr4-6gwm-r5cc
A Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. An attacker can use this to steal cookies, passwords or to run arb…
Published Oct 4, 2021 · Updated Aug 4, 2024 · Assigned by mitre