CVE-2020-20523: XSS

Q: What is CVE-2020-20523?

CVE-2020-20523 is a Cross Site Scripting (XSS) vulnerability in adm_user parameter in Gila CMS version 1.11.3.

Q: How severe is CVE-2020-20523?

CVE-2020-20523 has a severity rating of 6.1 (medium).

Q: How can remote attackers exploit CVE-2020-20523?

Remote attackers can exploit CVE-2020-20523 by executing arbitrary code during the Gila CMS installation.

Q: Which versions of Gila CMS are affected by CVE-2020-20523?

Gila CMS version 1.11.3 is affected by CVE-2020-20523.

Q: How can I fix CVE-2020-20523?

To fix CVE-2020-20523, upgrade to Gila CMS version 1.11.4 or apply the provided patch.

Published Aug 11, 2023

Updated

Cross Site Scripting (XSS) vulnerability in admuser parameter in Gila CMS version 1.11.3, allows remote attackers to execute arbitrary code during the Gila CMS installation.

Other sources

Cross Site Scripting (XSS) vulnerability in admuser parameter in Gila CMS version 1.11.3, allows remote attackers to execute arbitrary code during the Gila CMS installation.

Affected Software

2 affected componentsFixes available

composer/gilacms/gila<=1.11.3

1.11.4

GilaCMS Gila Cms=1.11.3

Event History

Aug 11, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Advisory Published

03:30 PM

Frequently Asked Questions

What is CVE-2020-20523?

CVE-2020-20523 is a Cross Site Scripting (XSS) vulnerability in adm_user parameter in Gila CMS version 1.11.3.

How severe is CVE-2020-20523?