CVE-2014-5259: XSS
Published Sep 12, 2014
·Updated
Cross-site scripting (XSS) vulnerability in cattranslate.php in the CatTranslate JQuery plugin in BlackCat CMS 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
Affected Software
1 affected component
Blackcat-cms Blackcat Cms<=1.0.3
Remediation
Patch Available
Event History
Sep 12, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-5259?
CVE-2014-5259 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2014-5259?
To fix CVE-2014-5259, upgrade BlackCat CMS to version 1.0.4 or later, which addresses the XSS vulnerability.
3
What type of attacks can be executed due to CVE-2014-5259?
CVE-2014-5259 allows attackers to inject arbitrary web scripts or HTML, leading to possible data theft or session hijacking.
4
Which versions of BlackCat CMS are affected by CVE-2014-5259?
CVE-2014-5259 affects BlackCat CMS versions 1.0.3 and earlier.
5
Is there a known exploit for CVE-2014-5259?
Yes, CVE-2014-5259 has known exploits that leverage the cross-site scripting vulnerability in the affected versions.