NuytsTech Security

CVE-2018-10821

by ·

Cross-site scripting (XSS) vulnerability in backend/pages/modify.php in BlackCatCMS 1.3 allows remote authenticated users with the Admin role to inject arbitrary web script or HTML via the search panel.

Date published : 2018-06-14

https://github.com/BlackCatDevelopment/BlackCatCMS/commit/a817755828cd0bfd4b87b0eb5cec59ffe57d3c3e

https://github.com/BlackCatDevelopment/BlackCatCMS/issues/384

Tags: