Description
The admin panel in BlackCat CMS 1.3.6 allows stored XSS (by an admin) via the Display Name field to backend/preferences/ajax_save.php.
Unscored
CVE-2021-27237
EUVD-2021-14002GHSA-wmxf-4m6r-mvjr
The admin panel in BlackCat CMS 1.3.6 allows stored XSS (by an admin) via the Display Name field to backend/preferences/ajax_save.php.
Published Feb 16, 2021 · Updated Aug 3, 2024 · Assigned by mitre