CVE-2019-17535: Gilacms Gila CMS

Medium severity, CVSS 6.1. EPSS: 2% chance of exploitation in the next 30 days.

Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647.

Affected products

• Gilacms Gila CMS: up to and including 1.11.4

Published 2019-10-13. Last modified 2026-06-17.