Unrated

There is stored cross site scripting (XSS) in Galileo CMS v0.042. Remote authenticated users could inject arbitrary web script or HTML via $page_title...

CVE-2019-7410 First seen on SecPulse Aug 14, 2020

Original description The description as published by the source.

There is stored cross site scripting (XSS) in Galileo CMS v0.042. Remote authenticated users could inject arbitrary web script or HTML via $page_title in /lib/Galileo/files/templates/page/show.html.ep (aka the PAGE TITLE Field).

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory metacpan.org
advisory metamorfosec.com
patch metamorfosec.com

Key facts

Severity: Unrated
Published: Aug 14, 2020
First seen on SecPulse: Aug 14, 2020

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:52