CVEvulnerability
CVE-2014-5259
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-09-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in cattranslate.php in the CatTranslate JQuery plugin in BlackCat CMS 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
Affected configurations
• blackcat-cms blackcat cms (<= 1.0.3)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://forum.blackcat-cms.org/viewtopic.php?f=2&t=263 Patch
- http://packetstormsecurity.com/files/128141/BlackCat-CMS-1.0.3-Cross-Site-Scripting.html Exploit
- http://www.securityfocus.com/archive/1/533336/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/69551 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95717 exchange.xforce.ibmcloud.com
- https://www.htbridge.com/advisory/HTB23228 Exploit
- http://forum.blackcat-cms.org/viewtopic.php?f=2&t=263 Patch
- http://packetstormsecurity.com/files/128141/BlackCat-CMS-1.0.3-Cross-Site-Scripting.html Exploit
- http://www.securityfocus.com/archive/1/533336/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/69551 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95717 exchange.xforce.ibmcloud.com
- https://www.htbridge.com/advisory/HTB23228 Exploit