Lucene search

K
osvGoogleOSV:CVE-2023-44042
HistorySep 27, 2023 - 3:19 p.m.

CVE-2023-44042

2023-09-2715:19:35
Google
osv.dev
2
cross-site scripting
black cat cms
website header
crafted payload
arbitrary scripts

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

20.8%

A stored cross-site scripting (XSS) vulnerability in /settings/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website header parameter.

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

20.8%

Related for OSV:CVE-2023-44042