Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2021-27237

Description

The admin panel in BlackCat CMS 1.3.6 allows stored XSS (by an admin) via the Display Name field to backend/preferences/ajax_save.php.

POC

Reference

- https://www.exploit-db.com/exploits/49565

Github

No PoCs found on GitHub currently.