Vulnerabilities > Blackcat CMS > Blackcat CMS > 1.1.2

DATE CVE VULNERABILITY TITLE RISK
2020-09-15 CVE-2020-25453 Cross-Site Request Forgery (CSRF) vulnerability in Blackcat-Cms Blackcat CMS
An issue was discovered in BlackCat CMS before 1.4. 		6.8
6.8
2015-07-14 CVE-2015-5521 Cross-site Scripting vulnerability in Blackcat-Cms Blackcat CMS 1.1.2
Cross-site scripting (XSS) vulnerability in BlackCat CMS 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the name in a new group to backend/groups/index.php.
network
low complexity
blackcat-cms CWE-79
4.8
4.8