Gila CMS 2.2.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:gilacms:gila_cms:2.2.0:*:*:*:*:*:*:*

part: a version: 2.2.0 update: *

VendorGilacms (7c5c0007-a535-5a17-b9f8-081bd26c3f0b)
ProductGila Cms (86ad9e7f-e0fd-5d3a-bcaa-0f59736c44b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/gilacms/gila purl2cpe 2026-06-01 10:17:57.948205
pkg:sourceforge/gila-cms purl2cpe 2026-06-01 10:17:57.948207

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-39486 vulnerable 2026-06-08 05:33:50.217670 Details available
A Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. An attacker can use this to steal cookies, passwords or to run arbitrary code on a victim's browser.
Published: 2021-10-04T13:45:26.000Z
Updated: 2024-08-04T02:06:42.648Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-37777 vulnerable 2026-06-08 05:32:54.753368 Details available
Gila CMS 2.2.0 is vulnerable to Insecure Direct Object Reference (IDOR). Thumbnails uploaded by one site owner are visible by another site owner just by knowing the other site name and fuzzing for picture names. This leads to sensitive information disclosure.
Published: 2021-10-04T13:40:18.000Z
Updated: 2024-08-04T01:30:08.653Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.