Summary
This host is installed with BlackCat CMS and is prone to cross site scripting vulnerability.
Impact
Successful exploitation will allow attacker to execute arbitrary HTML and script code in a user's browser session in the context of an affected site.
Impact Level: Application
Solution
Apply the patch from the below link,
http://forum.blackcat-cms.org/viewtopic.php?f=2& t=263,
or Upgrade to latest version, For updates refer to http://blackcat-cms.org
Insight
Flaw is due to the modules/lib_jquery/plugins/cattranslate/cattranslate.php script not properly sanitize input to the 'attr' and 'msg' parameter before returning it to users.
Affected
BlackCat CMS version 1.0.3 and probably prior.
Detection
Send a crafted exploit string via HTTP GET request and check whether it is possible to read cookie or not.
References
