VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Oct 4, 2021· Updated Jun 17, 2026

CVE-2021-39486

CVE-2021-39486

Description

A Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. An attacker can use this to steal cookies, passwords or to run arbitrary code on a victim's browser.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Gila/Gilallm-fuzzy2 versions
    =2.2.0+ 1 more
    • (no CPE)range: =2.2.0
    • (no CPE)
  • Gila/GilaCMS
    cpe:2.3:a:gilacms:gila_cms:2.2.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.