Design/Logic Flaw

cPanel before 55.9999.141 allows self XSS in X3 Reseller Branding Images SEC-88...

Design/Logic Flaw

cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...

Design/Logic Flaw

cPanel before 68.0.27 allows self XSS in the WHM listips interface SEC-389...

Authentication flaw

cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration SEC-383...

CVE-2016-10822

The CVE affects cPanel before 55.9999.141, where an apparent self-XSS flaw exists in X3 Reseller Branding Images due to insufficient validation of client-supplied data. Impact is client‑side code execution as described; no exploitation details are provided in the sources. Remediation: upgrade to ...

CVE-2018-20953

cPanel before 68.0.27 allows self XSS in the WHM listips interface SEC-389...

CVE-2018-20948

cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration SEC-383...

CVE-2018-20948

CVE-2018-20948 affects cPanel before 68.0.27, where the cPanel Backup Restoration feature (SEC-383) enables a self XSS vulnerability. The issue stems from insufficient validation of client-side data in the WEB application, allowing an attacker to inject/execute script in the context of an authent...

CVE-2018-20910

cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface SEC-357...

CVE-2018-20910

cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface SEC-357...

CVE-2018-20903

cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface SEC-421...

CVE-2018-20903

cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface SEC-421...

Design/Logic Flaw

cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface SEC-357...

Design/Logic Flaw

cPanel before 11.54.0.4 allows self XSS in the X3 Entropy Banner interface SEC-87...

Design/Logic Flaw

cPanel before 11.54.0.4 allows self XSS in the WHM PHP Configuration editor interface SEC-84...

Design/Logic Flaw

cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface SEC-421...

CVE-2016-10851

cPanel before 11.54.0.4 allows self XSS in the WHM PHP Configuration editor interface SEC-84...

CVE-2016-10854

cPanel before 11.54.0.4 allows self XSS in the X3 Entropy Banner interface SEC-87...

CVE-2018-20910

cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface SEC-357...

CVE-2018-20910

The CVE-2018-20910 entry concerns cPanel before 70.0.23, where the WHM cPAddons showsecurity interface is vulnerable to self-XSS. The issue stems from insufficient validation of client-side data, enabling an attacker to execute client-side code in affected versions. Public references indicate the...