2 matches found
CVE-2021-27237
The admin panel in BlackCat CMS 1.3.6 allows stored XSS by an admin via the Display Name field to backend/preferences/ajaxsave.php...
4.8CVSS0.0096EPSS
SaveExploits1References3
CVE-2021-27237: Improper Neutralization of Input During Web Page Generation
The admin panel in BlackCat CMS 1.3.6 allows stored XSS by an admin via the Display Name field to backend/preferences/ajaxsave.php...
4.8CVSS5.8AI score0.0096EPSS
SaveExploits1References2
20