Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2021-39486

Description

A Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. An attacker can use this to steal cookies, passwords or to run arbitrary code on a victim's browser.

POC

Reference

- https://www.navidkagalwalla.com/gila-cms-vulnerabilities

Github

No PoCs found on GitHub currently.