CVE-2019-20804

Published May 21st, 2020

View on NVD ↗

CVSS v3

8.8

HIGH

CVSS v2

6.8

MEDIUM

Affected

1

PROJECT

Description

Gila CMS before 1.11.6 allows CSRF with resultant XSS via the admin/themes URI, leading to compromise of the admin account.

A lightweight and fast CMS system built with PHP

GitHub

45