PT-2015-6970 · Blackcat · Blackcat Cms

Name of the Vulnerable Software and Affected Versions: BlackCat CMS version 1.1.2 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the name in a new group to "backend/groups/index.php" API endpoint. This enables attackers to perform cross-site scripting XS...