CVE-2019-7410

creationtimestamp| type| source ---|---|--- 2020-08-14 18:55:02+00:00| seen| https://t.me/cibsecurity/14141...

CVE-2019-7410

There is stored cross site scripting XSS in Galileo CMS v0.042. Remote authenticated users could inject arbitrary web script or HTML via $pagetitle in /lib/Galileo/files/templates/page/show.html.ep aka the PAGE TITLE Field...

CVE-2019-7410

CVE-2019-7410 : Galileo CMS v0.042 has a stored XSS vulnerability in the PAGE TITLE field, exploitable via $page_title in /lib/Galileo/files/templates/page/show.html.ep. Remote authenticated users can inject arbitrary script/HTML. Documented CVSS: CVSSv3.1 base 6.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:...