Security Advisory
CVE-2017-14049
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
In BlackCat CMS 1.2, backend/settings/ajax_save_settings.php allows remote authenticated users to conduct XSS attacks via the Website header or Website footer field.