CVE-2019-16679: Gilacms Gila CMS

Medium severity, CVSS 4.9. EPSS: 7% chance of exploitation in the next 30 days.

Gila CMS before 1.11.1 allows admin/fm/?f=../ directory traversal, leading to Local File Inclusion.

Affected products

• Gilacms Gila CMS: before 1.11.1 (fixed in 1.11.1)

Published 2019-09-21. Last modified 2026-06-17.