CVE-2017-14049: XSS
In BlackCat CMS 1.2, backend/settings/ajaxsavesettings.php allows remote authenticated users to conduct XSS attacks via the Website header or Website footer field.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14049?
CVE-2017-14049 is classified as a medium severity vulnerability due to the potential for remote authenticated users to exploit it for XSS attacks.
How do I fix CVE-2017-14049?
To fix CVE-2017-14049, it is recommended to sanitize and validate the inputs for the Website header and footer fields in BlackCat CMS.
Who is affected by CVE-2017-14049?
Users of BlackCat CMS version 1.2 are affected by CVE-2017-14049, particularly those with remote authenticated access.
What type of vulnerability is CVE-2017-14049?
CVE-2017-14049 is a cross-site scripting (XSS) vulnerability that allows for unauthorized script execution.
Can CVE-2017-14049 lead to data compromise?
Yes, exploiting CVE-2017-14049 can potentially lead to data compromise by allowing attackers to execute malicious scripts in the context of the user's session.