CVE-2020-26625

PoC —

CVSS 3.1

3.8 low

EPSS

<1%p50

Published

Jan 2, 2024 (Jan 2, 2024)

Modified

Jul 9, 2026

Description

A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier which allows a remote attacker to execute arbitrary web scripts via the 'user_id' parameter after the login portal.

Vendors: gilacms
Products: gila cms
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.