Gila CMS 1.10.1 allows fm/save CSRF for executing arbitrary PHP code.Referenceshttps://cisk123456.blogspot.com/2019/04/gila-cms-1101-csrf.html