PT-2025-51310 · Unknown+1 · Blackcat Cms+1

Mirabbas Ağalarov · Published 2025-12-15 · Updated 2025-12-21 · CVE-2023-53892

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Blackcat CMS version 1.4

Description Blackcat CMS version 1.4 has a remote code execution issue. Authenticated administrators can upload malicious PHP files using the jquery plugin manager. An attacker can upload a zip file containing a PHP shell script and then execute arbitrary system commands by accessing the uploaded plugin’s PHP file with the code parameter. The vulnerable component is the jquery plugin manager.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the jquery plugin manager for authenticated administrators. Avoid uploading zip files through the jquery plugin manager.

Exploit

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2023-53892

Affected Products

Blackcat Cms

Jquery Plugin

References · 7

• 🔥 https://exploit-db.com/exploits/51605 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-53892 · Security Note
• https://osv.dev/vulnerability/CVE-2023-53892 · Vendor Advisory
• https://blackcat-cms.org · Note
• https://vulncheck.com/advisories/blackcat-cms-remote-code-execution-via-jquery-plugin-manager · Note
• https://twitter.com/CVEnew/status/2002857359643943300 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2000704829631467616 · Twitter Post