CVE-2018-16635 Blackcat CMS 1.3.2 allows XSS via the willkommen.php?lang=DE page title at backend/pages/modify.php.
MediumCVSS 5.4
EPSS 0.57%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Blackcat CMS 1.3.2 allows XSS via the willkommen.php?lang=DE page title at backend/pages/modify.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| blackcat-cms blackcat cms | = 1.3.2 | No fix listed |
References
- github.com exploit third-party-advisory