Security Advisory
CVE-2020-25878
4.8
MEDIUM
Vulnerability Description
A stored cross site scripting (XSS) vulnerability in the 'Admin-Tools' feature of BlackCat CMS 1.3.6 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads entered into the 'Output Filters' and 'Droplets' modules.
Published Date
July 9, 2021
Official Source
NIST NVD Advisory