Cross-site Scripting in GilaCMS

MITTEL 5.4CVE-2020-20696 · GHSA-h7mq-27r7-w972 · Published 27/09/2021 · updated 17/06/2026

Kurz gesagt

CVE-2020-20696 ist eine Schwachstelle (MITTEL (CVSS 5.4)) in gilacms/gila, gila cms (gilacms).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.49%, höher als bei 42.4% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
gilacms/gila Packagist	`≤ 1.11.4`	No fix yet
gila cms gilacms	`= 1.11.4`	No fix yet

Description

A cross-site scripting (XSS) vulnerability in /admin/content/post of GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Tags field.

NVD description

A cross-site scripting (XSS) vulnerability in /admin/content/post of GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Tags field.

References

nvd.nist.gov/vuln/detail/CVE-2020-20696 · ADVISORY
GilaCMS/gila · WEB
GilaCMS/gila · PACKAGE

Weitere Schwachstellen in gilacms/gila

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gilacms/gila

Packagist

≤ 1.11.4

No fix yet

gila cms

gilacms

= 1.11.4

No fix yet

Description

A cross-site scripting (XSS) vulnerability in /admin/content/post of GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Tags field.

NVD description

A cross-site scripting (XSS) vulnerability in /admin/content/post of GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Tags field.

Weitere Schwachstellen in gilacms/gila

Alle anzeigen →