CVE-2018-10821: XSS
Published Jun 14, 2018
·Updated
Cross-site scripting (XSS) vulnerability in backend/pages/modify.php in BlackCatCMS 1.3 allows remote authenticated users with the Admin role to inject arbitrary web script or HTML via the search panel.
Affected Software
1 affected component
Blackcat-cms Blackcat Cms=1.3
Remediation
Event History
Jun 14, 2018
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-10821?
CVE-2018-10821 is classified as a high severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2018-10821?
To fix CVE-2018-10821, upgrade BlackCatCMS to the latest version that addresses this vulnerability.
3
Who is affected by CVE-2018-10821?
Remote authenticated users with the Admin role in BlackCatCMS 1.3 are affected by CVE-2018-10821.
4
What type of vulnerability is CVE-2018-10821?
CVE-2018-10821 is a cross-site scripting (XSS) vulnerability.
5
What can attackers do with CVE-2018-10821?
Attackers can inject arbitrary web scripts or HTML via the search panel in BlackCatCMS due to CVE-2018-10821.