CVE-2018-10821 PoC — BlackCatCMS 跨站脚本漏洞

Source

https://github.com/BalvinderSingh23/Cross-Site-Scripting-Reflected-XSS-Vulnerability-in-blackcatcms_v1.3

Associated Vulnerability

Title: BlackCatCMS 跨站脚本漏洞 (CVE-2018-10821)
Description:Cross-site scripting (XSS) vulnerability in backend/pages/modify.php in BlackCatCMS 1.3 allows remote authenticated users with the Admin role to inject arbitrary web script or HTML via the search panel.

Description

BlackCat-CMS-Bundle-v1.3 Cross Site Scripting(XSS) Assigned CVE Number: CVE-2018-10821

Readme

# Cross-Site-Scripting-Reflected-XSS-Vulnerability-in-blackcatcms_v1.3
BlackCat-CMS-Bundle-v1.3 Cross Site Scripting(XSS) Assigned CVE Number: CVE-2018-10821

https://github.com/BlackCatDevelopment/BlackCatCMS/issues/384

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →