CVE-2023-44042: XSS
Published Sep 26, 2023
·Updated
A stored cross-site scripting (XSS) vulnerability in /settings/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website header parameter.
Affected Software
1 affected component
Blackcat-cms Blackcat Cms=1.4.1
Event History
Sep 26, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-44042.
2
What is the severity of CVE-2023-44042?
The severity of CVE-2023-44042 is medium, with a CVSS score of 5.4.
3
What is the affected software by CVE-2023-44042?
The affected software is Black Cat CMS version 1.4.1.
4
How can an attacker exploit CVE-2023-44042?
An attacker can exploit CVE-2023-44042 by injecting a crafted payload into the Website header parameter, allowing them to execute arbitrary web scripts or HTML.
5
Is there a fix available for CVE-2023-44042?
Currently, there is no known fix for CVE-2023-44042. It is recommended to update to a newer version of Black Cat CMS when it becomes available.