medium6.1
CVE-2020-20523
Gila CMS Cross-site Scripting Vulnerability
Impact
Cross Site Scripting (XSS) vulnerability in `adm_user` parameter in Gila CMS version 1.11.3, allows remote attackers to execute arbitrary code during the Gila CMS installation.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | gilacms/gila | <= 1.11.3 | 1.11.4 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gilacms | Gila Cms | Version 1.11.3 |