Description
Blackcat CMS 1.4 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts into page content. Attackers can insert JavaScript payloads in the page modification interface that execute when other users view the compromised page.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| blackcat-cms | Blackcat CMS | 1.4 | — |
References
- ExploitDB-51604 exploit
- BlackCat CMS Product Webpage product
- VulnCheck Advisory: Blackcat CMS 1.4 Stored Cross-Site Scripting via Page Modification third-party-advisory