CVE-2020-25878

A stored cross site scripting (XSS) vulnerability in the 'Admin-Tools' feature of BlackCat CMS 1.3.6 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads entered into the 'Output Filters' and 'Droplets' modules.
CVSS

No CVSS.

Configurations

No configuration.

Information

Published : 2021-07-09 22:15

Updated : 2021-07-10 02:00


NVD link : CVE-2020-25878

Mitre link : CVE-2020-25878


JSON object : View

Products Affected

No product.

CWE

No CWE.