Cross-Site Scripting Vulnerability in BlackCat CMS by BlackCat Development
CVE-2015-5521

4.8MEDIUM

Key Information:

Vendor

Blackcat-cms

Status
Blackcat Cms
Vendor
CVE Published:
14 July 2015

What is CVE-2015-5521?

A cross-site scripting vulnerability exists in BlackCat CMS version 1.1.2, which permits remote attackers to inject arbitrary web scripts or HTML. This can be exploited via the 'name' parameter in the backend/groups/index.php interface when creating a new group. Such an exploitation could lead to unauthorized access or manipulation of user data, posing a significant risk to the integrity and security of the web application.

References

http://packetstormsecurity.com/files/132589/Black-Cat-CMS...
https://github.com/BlackCatDevelopment/BlackCatCMS/issues...

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2015-5521 : Cross-Site Scripting Vulnerability in BlackCat CMS by BlackCat Development