CVE-2020-25877
09.07.2021, 22:15
A stored cross site scripting (XSS) vulnerability in the 'Add Page' feature of BlackCat CMS 1.3.6 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Title' parameter.
| Vendor | Product | Version |
|---|---|---|
| blackcat-cms | blackcat_cms | 1.3.6 |
𝑥
= Vulnerable software versions