Cross site scripting

2021-07-0922:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

24.8%

JSON

A stored cross site scripting (XSS) vulnerability in the ‘Add Page’ feature of BlackCat CMS 1.3.6 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the ‘Title’ parameter.

CPENameOperatorVersion
blackcat_cmseq1.3.6

CPE	Name	Operator	Version
	blackcat_cms	eq	1.3.6

References

blackcat-cms.org/

github.com/BlackCatDevelopment/BlackCatCMS/issues/401

0.001 Low

EPSS

Percentile

24.8%

JSON

Related for PRION:CVE-2020-25877