CVE-2018-16635: XSS
Published Dec 10, 2018
·Updated
Blackcat CMS 1.3.2 allows XSS via the willkommen.php?lang=DE page title at backend/pages/modify.php.
Affected Software
1 affected component
Blackcat-cms Blackcat Cms=1.3.2
Event History
Dec 10, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is CVE-2018-16635?
CVE-2018-16635 is a vulnerability in Blackcat CMS 1.3.2 that allows XSS via the willkommen.php?lang=DE page title at backend/pages/modify.php.
2
How severe is CVE-2018-16635?
CVE-2018-16635 has a severity keyword of medium with a severity value of 5.4.
3
What software version is affected by CVE-2018-16635?
Blackcat CMS version 1.3.2 is affected by CVE-2018-16635.
4
What is the CWE for CVE-2018-16635?
The Common Weakness Enumeration (CWE) for CVE-2018-16635 is CWE-79.
5
How can I prevent XSS via the willkommen.php?lang=DE page title?
To prevent XSS via the willkommen.php?lang=DE page title, update Blackcat CMS to a version that addresses the vulnerability.