CVE-2023-53891: Blackcat CMS 1.4 Stored Cross-Site Scripting via Page Modification

Published Dec 15, 2025

Updated

Blackcat CMS 1.4 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts into page content. Attackers can insert JavaScript payloads in the page modification interface that execute when other users view the compromised page.

Affected Software

2 affected components

Blackcat CMS

Blackcat-cms Blackcat Cms=1.4

Event History

Dec 15, 2025

CVE Published

via MITRE·08:28 PM

Data Sourced

via MITRE·08:28 PM

DescriptionWeakness

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-53891?

The severity of CVE-2023-53891 is considered high due to the potential for stored cross-site scripting attacks.

How do I fix CVE-2023-53891?

To fix CVE-2023-53891, it is recommended to update Blackcat CMS to the latest version that addresses this vulnerability.

Who is affected by CVE-2023-53891?

Authenticated users of Blackcat CMS 1.4 are affected by CVE-2023-53891 due to the ability to inject scripts into page content.

What type of vulnerability is CVE-2023-53891?

CVE-2023-53891 is a stored cross-site scripting vulnerability that allows the execution of malicious scripts.

What can attackers do with CVE-2023-53891?

Attackers can insert JavaScript payloads that execute when other users view the compromised page, potentially leading to data theft or account takeover.