2 matches found
CVE-2026-41472
CyberPanel versions prior to 2.4.5 contain a stored cross-site scripting vulnerability in the AI Scanner dashboard where the POST /api/ai-scanner/callback endpoint lacks authentication and allows unauthenticated attackers to inject malicious JavaScript by overwriting the findingsjson field of...
9.3CVSS6AI score0.00516EPSS
SaveExploits1References7
CVE-2026-41472: Improper Neutralization of Input During Web Page Generation
CyberPanel versions prior to 2.4.5 contain a stored cross-site scripting vulnerability in the AI Scanner dashboard where the POST /api/ai-scanner/callback endpoint lacks authentication and allows unauthenticated attackers to inject malicious JavaScript by overwriting the findingsjson field of...
6.1CVSS6AI score0.00516EPSS
SaveExploits1References4
20