Security Advisory
CVE-2021-27237
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The admin panel in BlackCat CMS 1.3.6 allows stored XSS (by an admin) via the Display Name field to backend/preferences/ajax_save.php.