CVE-2017-14049: Blackcat-CMS Blackcat CMS

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

In BlackCat CMS 1.2, backend/settings/ajax_save_settings.php allows remote authenticated users to conduct XSS attacks via the Website header or Website footer field.

Affected products

• Blackcat-CMS Blackcat CMS: version 1.2 only

Published 2017-08-31. Last modified 2026-06-17.