Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2023-53891

Blackcat CMS 1.4 Stored Cross-Site Scripting via Page Modification

Description

Blackcat CMS 1.4 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts into page content. Attackers can insert JavaScript payloads in the page modification interface that execute when other users view the compromised page.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

blackcat-cms Blackcat CMS

  • 1.4affected

References