Kamaljeet Kumar

2 exploits Active since Apr 2020

CVE-2021-27237 EXPLOITDB MEDIUM text WRITEUP

BlackCat CMS 1.3.6 - XSS

The admin panel in BlackCat CMS 1.3.6 allows stored XSS (by an admin) via the Display Name field to backend/preferences/ajax_save.php.

CVSS 4.8

View Code

CVE-2020-12261 EXPLOITDB MEDIUM text WORKING POC

Opmantek Open-audit - XSS

Open-AudIT 3.3.0 allows an XSS attack after login.

CVSS 5.4

View Code