Unrated severityOSV Advisory· Published Dec 15, 2025· Updated Apr 7, 2026
Blackcat CMS 1.4 Remote Code Execution via Jquery Plugin Manager
CVE-2023-53892
Description
Blackcat CMS 1.4 contains a remote code execution vulnerability that allows authenticated administrators to upload malicious PHP files through the jquery plugin manager. Attackers can upload a zip file with a PHP shell script and execute arbitrary system commands by accessing the uploaded plugin's PHP file with a 'code' parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: 1.0, 1.0.3, 1.1, …
- Range: =1.4
Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/51605mitreexploit
- www.vulncheck.com/advisories/blackcat-cms-remote-code-execution-via-jquery-plugin-managermitrethird-party-advisory
- blackcat-cms.orgmitreproduct
News mentions
0No linked articles in our index yet.