Vulnerabilidades do Blackcat-cms Blackcat Cms

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Blackcat-cms Blackcat Cms: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:blackcat-cms:blackcat_cms

CVE-2023-53892 Alta · 7.2 CWE-434 15/12/2025

Blackcat CMS 1.4 Remote Code Execution via Jquery Plugin Manager

Blackcat CMS 1.4 contains a remote code execution vulnerability that allows authenticated administrators to upload malicious PHP files through the jquery plugin manager. Attackers can upload a zip file with a PHP shell script and execute arbitrary system commands by accessing the uploaded plugin's PHP file with a 'code' parameter.

CVE-2023-53891 Média · 5.4 CWE-79 15/12/2025

Blackcat CMS 1.4 Stored Cross-Site Scripting via Page Modification

Blackcat CMS 1.4 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts into page content. Attackers can insert JavaScript payloads in the page modification interface that execute when other users view the compromised page.