CVE-2023-44043: XSS
Published Sep 26, 2023
·Updated
A reflected cross-site scripting (XSS) vulnerability in /install/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website title parameter.
Affected Software
1 affected component
Blackcat-cms Blackcat Cms=1.4.1
Event History
Sep 26, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-44043.
2
What is the severity of CVE-2023-44043?
The severity of CVE-2023-44043 is medium, with a severity value of 6.1.
3
What is the affected software for CVE-2023-44043?
The affected software for CVE-2023-44043 is Black Cat CMS version 1.4.1.
4
How does CVE-2023-44043 allow attackers to execute arbitrary web scripts or HTML?
CVE-2023-44043 allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the Website footer parameter.
5
Is there a fix available for CVE-2023-44043?
At this time, there is no known fix available for CVE-2023-44043. It is recommended to update to a version of Black Cat CMS that is not affected by this vulnerability, if available.