cve/2021/CVE-2021-39486.md
2025-09-29 21:09:30 +02:00

663 B

CVE-2021-39486

Description

A Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. An attacker can use this to steal cookies, passwords or to run arbitrary code on a victim's browser.

POC

Reference

Github

No PoCs found on GitHub currently.