high8.8
CVE-2020-20693
Cross-Site Request Forgery in GilaCMS
Impact
A Cross-Site Request Forgery (CSRF) in GilaCMS v1.11.4 allows authenticated attackers to arbitrarily add administrator accounts.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | gilacms/gila | <= 1.11.4 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gilacms | Gila Cms | Version 1.11.4 |