CVE-2017-9609: XSS
Published Jul 17, 2017
·Updated
Cross-site scripting (XSS) vulnerability in Blackcat CMS 1.2 allows remote authenticated users to inject arbitrary web script or HTML via the maplanguage parameter to backend/pages/langsettings.php.
Affected Software
1 affected component
Blackcat-cms Blackcat Cms=1.2
Remediation
Event History
Jul 17, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-9609?
The severity of CVE-2017-9609 is rated as medium with a score of 5.4.
2
How do I fix CVE-2017-9609?
To fix CVE-2017-9609, ensure that input from the map_language parameter is properly sanitized to prevent XSS attacks.
3
Who is affected by CVE-2017-9609?
CVE-2017-9609 affects users of Blackcat CMS version 1.2.
4
What kind of vulnerability is CVE-2017-9609?
CVE-2017-9609 is a cross-site scripting (XSS) vulnerability.
5
What are the implications of CVE-2017-9609 for users?
The implications of CVE-2017-9609 include the potential for authenticated users to inject malicious scripts that could compromise user security.