CVE-2019-17535

Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647.

• CWE-79

• https://github.com/GilaCMS/gila/pull/48Exploit, Patch, Third Party Advisory
• https://rastating.github.io/gila-cms-reflected-xss/Exploit, Third Party Advisory
• https://github.com/GilaCMS/gila/pull/48Exploit, Patch, Third Party Advisory
• https://rastating.github.io/gila-cms-reflected-xss/Exploit, Third Party Advisory

Published

Oct 13, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1753A vulnerability in the web UI of Cisco IOS XE Software could…8.8
• CVE-2019-17530An issue was discovered in Bento4 1.5.1.0. There is a heap-b…7.8
• CVE-2019-17531A Polymorphic Typing issue was discovered in FasterXML jacks…9.8
• CVE-2019-17532An issue was discovered on Belkin Wemo Switch 28B WW_2.00.11…7.5
• CVE-2019-17533Mat_VarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certa…8.2
• CVE-2019-17534vips_foreign_load_gif_scan_image in foreign/gifload.c in lib…8.8
• CVE-2019-17536Gila CMS through 1.11.4 allows Unrestricted Upload of a File…4.9
• CVE-2019-17537Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Travers…7.5
• CVE-2019-17538Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Travers…7.5
• CVE-2019-17539In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c al…9.8
• CVE-2019-1754A vulnerability in the authorization subsystem of Cisco IOS …8.8
• CVE-2019-17540ImageMagick before 7.0.8-54 has a heap-based buffer overflow…8.8