CVE-2019-20804

HIGH 8.8CVE-2019-20804 · Published 21/05/2020 · updated 17/06/2026

In short

CVE-2019-20804 is a HIGH (CVSS 8.8) vulnerability affecting gila cms (gilacms).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.9% of all vulnerabilities.
Fix: update to 1.11.6 or later.

Package	Affected versions	Patched versions
gila cms gilacms	`< 1.11.6`	`1.11.6`

Gila CMS before 1.11.6 allows CSRF with resultant XSS via the admin/themes URI, leading to compromise of the admin account.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 1.11.6

1.11.6

More vulnerabilities in gila cms

See all →