CVE-2023-53891

5.1 mediumEPSS 0.2%

Medium (5.1) in blackcat-cms blackcat cms. EPSS 0.2% chance of exploitation in the next 30 days.

Blackcat CMS 1.4 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts into page content. Attackers can insert JavaScript payloads in the page modification interface that execute when other users view the compromised page.

Severity

CVSS 4.0

5.1 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2025-12-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

blackcat-cms:blackcat_cms

References

https://blackcat-cms.org/
https://www.exploit-db.com/exploits/51604
https://www.vulncheck.com/advisories/blackcat-cms-stored-cross-site-scripting-via-page-modification
https://www.exploit-db.com/exploits/51604

Check your stack JSON