Vulnerability · Published Dec 15, 2025 · Assigned by VulnCheck
CVE-2023-53891Blackcat CMS 1.4 Stored Cross-Site Scripting via Page Modification
Medium 5.1
In plain English
A medium-severity cross-site scripting in Blackcat CMS from blackcat-cms. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).
Severity (CVSS 4.0)5.1Medium
Exploit odds (30 days)0.2%top 84.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Blackcat CMS 1.4 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts into page content. Attackers can insert JavaScript payloads in the page modification interface that execute when other users view the compromised page.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| blackcat-cms | Blackcat CMS | 1.4 |
Weakness: CWE-79 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
References
- ExploitDB-51604 exploit
- BlackCat CMS Product Webpage product
- VulnCheck Advisory: Blackcat CMS 1.4 Stored Cross-Site Scripting via Page Modification third-party-advisory