IQID:9387 BlackCat CMS Cross-Site Scripting Vulnerability S

IQID: 9387 - September 2014

The vulnerability exists due to insufficient sanitization of the "msg" HTTP GET parameter passed to "/modules/lib_jquery/plugins/cattranslate/cattranslate.php" script. A remote attacker can trick a logged-in user to open a specially crafted link and execute arbitrary HTML and script code in browser in context of the vulnerable website. Successful exploitation of the vulnerability may allow an attacker to steal sensitive information, alter website pages and perform phishing attacks.

A Full Description is available for this threat, please sign in for access to Full Description.

 

Attack Data

Attack Data is available for this threat, please sign in for access to Attack Data.

 

CVSS Information

CVSS Information is available for this threat, please sign in for access to CVSS Information.

 

Date

Date Information is available for this threat, please sign in for access to Date Information.

 

External Resources

External resources are available for this threat, please sign in for access to external resources.