VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 4, 2021· Updated Aug 4, 2024

CVE-2021-39486

CVE-2021-39486

Description

A Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. An attacker can use this to steal cookies, passwords or to run arbitrary code on a victim's browser.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Gila CMS/Gila CMSdescription
  • Gila/Gilallm-fuzzy
    Range: = 2.2.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.