CVE-2017-14049 in BlackCat CMS
Summary
In BlackCat CMS 1.2, backend/settings/ajax_save_settings.php allows remote authenticated users to conduct XSS attacks via the Website header or Website footer field.
Reservation
08/30/2017
Disclosure
08/31/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 106019 | BlackCat CMS ajax_save_settings.php cross site scripting | 79 | Not defined | Not defined | CVE-2017-14049 |