Catfish CMS v4.7.9 allows XSS via the admin/Index/write.html editorValue parameter (aka an article posted by an administrator).

Published Jul 12, 2018 · Updated Aug 5, 2024 · Assigned by mitre