High severity7.2OSV Advisory· Published Dec 15, 2025· Updated Jun 17, 2026
CVE-2023-53892
CVE-2023-53892
Description
Blackcat CMS 1.4 contains a remote code execution vulnerability that allows authenticated administrators to upload malicious PHP files through the jquery plugin manager. Attackers can upload a zip file with a PHP shell script and execute arbitrary system commands by accessing the uploaded plugin's PHP file with a 'code' parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: 1.0, 1.0.3, 1.1, …
cpe:2.3:a:blackcat-cms:blackcat_cms:1.4:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:blackcat-cms:blackcat_cms:1.4:*:*:*:*:*:*:*
- (no CPE)range: <1.4
Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/51605nvdExploitThird Party AdvisoryVDB Entry
- www.vulncheck.com/advisories/blackcat-cms-remote-code-execution-via-jquery-plugin-managernvdThird Party Advisory
- blackcat-cms.orgnvdProduct
News mentions
0No linked articles in our index yet.