All packages
Gila CMS vulnerabilities
3 known CVE vulnerabilities in Gila CMS, translated and rated.
- CVE-2020-26625Low
A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier. It allows a remote attacker to execute arbitrary web scripts via the 'user_id' parameter after login.
- CVE-2020-26624Low
A SQL injection vulnerability in Gila CMS 1.15.4 and earlier allows a remote attacker to execute arbitrary web scripts via the ID parameter after login.
- CVE-2020-26623Low
A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier. A remote attacker can execute arbitrary web scripts via the Area parameter under the Administration>Widget tab after login.