CVE-2023-44042

Summary

CVE-2023-44042 is a stored cross-site scripting (XSS) vulnerability affecting the Black Cat CMS 1.4.1 in the /settings/index.php file. An attacker can exploit this weakness by injecting a malicious payload into the Website header parameter. Successful exploitation allows the attacker to execute arbitrary web scripts or HTML code, potentially leading to unauthorized access, data theft, or site defacement. This vulnerability poses a significant risk to websites running on the outdated Black Cat CMS version and requires immediate attention and patching.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.