CVE-2021-39486: Gilacms Gila CMS

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

A Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. An attacker can use this to steal cookies, passwords or to run arbitrary code on a victim's browser.

Affected products

• Gilacms Gila CMS: version 2.2.0 only

Published 2021-10-04. Last modified 2026-06-17.