CVE-2021-27237
MEDIUM 4.8EPSS 1.0%
The admin panel in BlackCat CMS 1.3.6 allows stored XSS (by an admin) via the Display Name field to backend/preferences/ajax_save.php.
- CVSS v3.1
- 4.8 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N - CVSS v2.0
- 3.5 LOW
AV:N/AC:M/Au:S/C:N/I:P/A:N - EPSS
- 0.96% chance of exploitation in the next 30 days, 59th percentile
- Published
- 2021-02-16
- Updated
- 2024-08-03