← Database

CVE-2021-39486

MEDIUM CVSS: 5.4 Published: 2021-10-04 Modified: 2026-06-17

Description

A Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. An attacker can use this to steal cookies, passwords or to run arbitrary code on a victim's browser.

Affected Platforms

Gilacms Gila Cms

Weakness Type

CWE-79

References