CVE-2020-26624

LowCVSS 3.8

Published: 02/01/2024(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.66%

47th percentile - higher than 47% of all known CVEs

Summary

A SQL injection vulnerability in Gila CMS 1.15.4 and earlier allows a remote attacker to execute arbitrary web scripts via the ID parameter after login.

Risk Assessment

An attacker can gain unauthorized access to the database, steal or modify data, and potentially take control of the application.

Recommendation

Immediately update Gila CMS to the latest available version that includes a fix for the SQL injection vulnerability.

Original NVD description (English source)

A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier which allows a remote attacker to execute arbitrary web scripts via the ID parameter after the login portal.