CVE-2020-20696

Name of the Vulnerable Software and Affected Versions: GilaCMS version 1.11.4

Description: A cross-site scripting (XSS) issue in the /admin/content/post endpoint of GilaCMS allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Tags field.

Recommendations: For GilaCMS version 1.11.4, consider disabling the Tags field in the /admin/content/post endpoint until a patch is available to prevent exploitation. Restrict access to the /admin/content/post endpoint to minimize the risk of arbitrary web script execution. Avoid using the Tags field in the affected endpoint until the issue is resolved.