CVE-2019-7410

There is stored cross site scripting (XSS) in Galileo CMS v0.042

published August 14, 2020

CVSS
—
EPSS
1%
Percentile
66.9
In the wild
Unconfirmed
What it is

There is stored cross site scripting (XSS) in Galileo CMS v0.042. Remote authenticated users could inject arbitrary web script or HTML via $page_title in /lib/Galileo/files/templates/page/show.html.ep (aka the PAGE TITLE Field).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01161 · 66.9th percentile
Published
2020-08-14T13:35Z
EPSS history
Timeline
  • 14 AUG 13:35Z
    There is stored cross site scripting (XSS) in Galileo CMS v0.042
    cvelistv5