CVE-2021-39486 | BDVDB-2026-161921 Detail

Description#

A Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. An attacker can use this to steal cookies, passwords or to run arbitrary code on a victim's browser.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.navidkagalwalla.com/gila-cms-vulnerabilities

Exploit#

No public exploit known

History#

Version 12021-10-04Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.