Kamaljeet Kumar

2 exploits Active since Apr 2020
CVE-2021-27237 EXPLOITDB MEDIUM text WRITEUP
BlackCat CMS 1.3.6 - Stored Cross-Site Scripting via Display Name Field
The admin panel in BlackCat CMS 1.3.6 allows stored XSS (by an admin) via the Display Name field to backend/preferences/ajax_save.php.
CVSS 4.8
CVE-2020-12261 EXPLOITDB MEDIUM text WORKING POC
Open-AudIT 3.3.0 - Stored Cross-Site Scripting in Error Templates
Open-AudIT 3.3.0 allows an XSS attack after login.
CVSS 5.4