CVE-2020-20693

Published
View on NVD ↗
CVSS v3
8.8
HIGH
CVSS v2
6.8
MEDIUM
Affected
1
PROJECT

Description

A Cross-Site Request Forgery (CSRF) in GilaCMS v1.11.4 allows authenticated attackers to arbitrarily add administrator accounts.

GilaCMS/gila
GilaCMS/gila
A lightweight and fast CMS system built with PHP
GitHubGitHub
45