2 matches found
CVE-2019-7410
There is stored cross site scripting XSS in Galileo CMS v0.042. Remote authenticated users could inject arbitrary web script or HTML via $pagetitle in /lib/Galileo/files/templates/page/show.html.ep aka the PAGE TITLE Field...
6.1CVSS5.4AI score
SaveExploits0References4
Cross site scripting
There is stored cross site scripting XSS in Galileo CMS v0.042. Remote authenticated users could inject arbitrary web script or HTML via $pagetitle in /lib/Galileo/files/templates/page/show.html.ep aka the PAGE TITLE Field...
4.3CVSS5.9AI score0.01161EPSS
SaveExploits0References4Affected Software1
20