Cross site scripting

2018-08-3022:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

37.5%

JSON

cPanel through 74 allows XSS via a crafted filename in the logs subdirectory of a user account, because the filename is mishandled during frontend/THEME/raw/index.html rendering.

CPENameOperatorVersion
cpanelle74

CPE	Name	Operator	Version
	cpanel	le	74

References

cxsecurity.com/issue/WLB-2018080093

0.001 Low

EPSS

Percentile

37.5%

JSON

Related for PRION:CVE-2018-16236