CVE-2020-20692

Published September 27th, 2021

View on NVD ↗

CVSS v3

7.2

HIGH

CVSS v2

6.5

MEDIUM

Affected

1

PROJECT

Description

GilaCMS v1.11.4 was discovered to contain a SQL injection vulnerability via the $_GET parameter in /src/core/controllers/cm.php.

A lightweight and fast CMS system built with PHP

GitHub

45