CVE-2018-16635: Blackcat-CMS Blackcat CMS

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Blackcat CMS 1.3.2 allows XSS via the willkommen.php?lang=DE page title at backend/pages/modify.php.

Affected products

• Blackcat-CMS Blackcat CMS: version 1.3.2 only

Published 2018-12-10. Last modified 2026-06-17.