CVE-2015-5521: Blackcat-CMS Blackcat CMS

Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in BlackCat CMS 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the name in a new group to backend/groups/index.php.

Affected products

• Blackcat-CMS Blackcat CMS: version 1.1.2 only

Published 2015-07-14. Last modified 2026-06-17.