CVE-2019-7410

—

CVSS 3.1

6.1 medium

EPSS

1%p65

Published

Aug 14, 2020 (Aug 14, 2020)

Modified

Jun 17, 2026

Description

There is stored cross site scripting (XSS) in Galileo CMS v0.042. Remote authenticated users could inject arbitrary web script or HTML via $page_title in /lib/Galileo/files/templates/page/show.html.ep (aka the PAGE TITLE Field).

Vendors: galileo cms project
Products: galileo cms
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.