Design/Logic Flaw

The admin panel in BlackCat CMS 1.3.6 allows stored XSS by an admin via the Display Name field to backend/preferences/ajaxsave.php...

CVE-2021-27237

The admin panel in BlackCat CMS 1.3.6 allows stored XSS by an admin via the Display Name field to backend/preferences/ajaxsave.php...

PT-2021-17344

Name of the Vulnerable Software and Affected Versions: BlackCat CMS version 1.3.6 Description: The issue concerns stored XSS in the admin panel of BlackCat CMS, specifically via the Display Name field. This occurs when an admin interacts with the "backend/preferences/ajax save.php" endpoint...

CVE-2021-27237: Improper Neutralization of Input During Web Page Generation

The admin panel in BlackCat CMS 1.3.6 allows stored XSS by an admin via the Display Name field to backend/preferences/ajaxsave.php...

Blackcat Cms 跨站脚本漏洞

BlackCat CMS is a PHP5, HTML5 content management system. A stored cross-site scripting vulnerability exists in BlackCat CMS 1.3.6. The vulnerability can be exploited to conduct a cross-site scripting attack via the Display Name field in backend/preferences/ajaxsave.php...