CVE-2017-9609: Cross-site scripting (XSS) vulnerability in Blackcat CMS 1.2 allows remote authenticated users to inject ar...

Security readout for executives and security teams

Blackcat CMS 1.2 has an authenticated cross-site scripting issue in its backend language settings page. A logged-in user could inject script or HTML through a specific parameter, potentially affecting administrators or other backend users who view the page. Exposure is most likely where Blackcat CMS 1.2 is still deployed and backend access is available to multiple users, contractors, or lower-trust accounts. Anonymous internet exposure is not established by the provided sources. Treat as a targeted CMS administration risk, not an emergency based on current evidence. Prioritize validation if Blackcat CMS 1.2 supports public-facing sites or has many backend users. Mitigation focus: Inventory any Blackcat CMS deployments and confirm whether version 1.2 is present.; Review the vendor issue and release history for an official fix or upgrade path.; Restrict backend access to trusted users until remediation is confirmed..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.