CVE-2015-5521: XSS

Published Jul 14, 2015

Updated

Cross-site scripting (XSS) vulnerability in BlackCat CMS 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the name in a new group to backend/groups/index.php.

Affected Software

1 affected component

Blackcat-cms Blackcat Cms=1.1.2

Event History

Jul 14, 2015

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-5521?

CVE-2015-5521 is rated as a medium severity vulnerability due to its potential for cross-site scripting (XSS) attacks.

How do I fix CVE-2015-5521?

To fix CVE-2015-5521, update BlackCat CMS to the latest version, ensuring to implement proper input validation and output encoding for user inputs.

Who is affected by CVE-2015-5521?

CVE-2015-5521 affects users of BlackCat CMS version 1.1.2.

What are the potential impacts of CVE-2015-5521?

The potential impacts of CVE-2015-5521 include unauthorized script execution in users' browsers, leading to data theft or session hijacking.

How can attackers exploit CVE-2015-5521?

Attackers can exploit CVE-2015-5521 by injecting malicious scripts through the name input in the new group creation process in the backend.