Medium severity5.4NVD Advisory· Published Sep 27, 2023· Updated Jun 17, 2026
CVE-2023-44042
CVE-2023-44042
Description
A stored cross-site scripting (XSS) vulnerability in /settings/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website header parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:blackcat-cms:blackcat_cms:1.4.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:blackcat-cms:blackcat_cms:1.4.1:*:*:*:*:*:*:*
- (no CPE)range: =1.4.1
- Black Cat CMS/Black Cat CMSdescription
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.