CPANTS

Galileo 0.007 Deleted

Security Advisories

CVE-2019-7410

There is stored cross site scripting (XSS) in Galileo CMS v0.042. Remote authenticated users could inject arbitrary web script or HTML via $page_title in /lib/Galileo/files/templates/page/show.html.ep (aka the PAGE TITLE Field).

Fixed version: >=0.043

Severity: medium

Reported: 2020-08-14

Kwalitee Issues

This is not the latest release. The following issues may have already been fixed in the newer releases.

use_strict

Add 'use strict' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules are strictly written.

Error: Galileo::DB::Schema, Galileo::DB::Schema::Result::Menu, Galileo::DB::Schema::Result::Page, Galileo::DB::Schema::Result::User

1 Extra Issue

use_warnings

Add 'use warnings' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules warn when something bad happens.

Error: Galileo::DB::Schema, Galileo::DB::Schema::Result::Menu, Galileo::DB::Schema::Result::Page, Galileo::DB::Schema::Result::User

1 Experimental Issue

has_separate_license_file: This is not a critical issue. Currently mainly informative for the CPANTS authors. It might be removed later.

Modules

Name	Abstract	Version	View
Galileo	A simple modern CMS built on Mojolicious	0.007	metacpan
Galileo::Admin		0	metacpan
Galileo::Command::config		0	metacpan
Galileo::Command::setup		0	metacpan
Galileo::DB::Schema		0	metacpan
Galileo::DB::Schema::Result::Menu		0	metacpan
Galileo::DB::Schema::Result::Page		0	metacpan
Galileo::DB::Schema::Result::User		0	metacpan
Galileo::Edit		0	metacpan
Galileo::Page		0	metacpan
Galileo::User		0	metacpan

Other Files


Build.PL	metacpan
Changes	metacpan
MANIFEST	metacpan
META.json	metacpan
META.yml	metacpan