EUVD-2019-16952

Malware in sbrugna...

Galileo CMS Cross-Site Scripting Vulnerability

Galileo CMS is a simple and modern CMS based on Mojolicious. Galileo CMS 0.042 suffers from a stored cross-site scripting vulnerability. An attacker can exploit this vulnerability to inject arbitrary web script or HTML via $pagetitle in /lib/Galileo/files/templates/page/show.html.ep...

CVE-2019-7410

There is stored cross site scripting XSS in Galileo CMS v0.042. Remote authenticated users could inject arbitrary web script or HTML via $pagetitle in /lib/Galileo/files/templates/page/show.html.ep aka the PAGE TITLE Field...

CVE-2019-7410

There is stored cross site scripting XSS in Galileo CMS v0.042. Remote authenticated users could inject arbitrary web script or HTML via $pagetitle in /lib/Galileo/files/templates/page/show.html.ep aka the PAGE TITLE Field...

Cross site scripting

There is stored cross site scripting XSS in Galileo CMS v0.042. Remote authenticated users could inject arbitrary web script or HTML via $pagetitle in /lib/Galileo/files/templates/page/show.html.ep aka the PAGE TITLE Field...

CVE-2019-7410

There is stored cross site scripting XSS in Galileo CMS v0.042. Remote authenticated users could inject arbitrary web script or HTML via $pagetitle in /lib/Galileo/files/templates/page/show.html.ep aka the PAGE TITLE Field...

CVE-2019-7410

CVE-2019-7410 : Galileo CMS v0.042 has a stored XSS vulnerability in the PAGE TITLE field, exploitable via $page_title in /lib/Galileo/files/templates/page/show.html.ep. Remote authenticated users can inject arbitrary script/HTML. Documented CVSS: CVSSv3.1 base 6.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:...

CVE-2019-7410: Improper Neutralization of Input During Web Page Generation

There is stored cross site scripting XSS in Galileo CMS v0.042. Remote authenticated users could inject arbitrary web script or HTML via $pagetitle in /lib/Galileo/files/templates/page/show.html.ep aka the PAGE TITLE Field...