Cross site scripting

cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action SEC-376...

CVE-2018-20923

CVE-2018-20923 affects cPanel prior to version 70.0.23. The vulnerability is a stored XSS in the WHM Synchronize DNS Records action (SEC-377), enabling script execution in a victim’s browser. Public documents consistently describe it as a stored XSS in the web interface, with the NVD metrics indi...

CVE-2018-20922

CVE-2018-20922 affects cPanel prior to 70.0.23, where a stored XSS vulnerability exists via a WHM DNS Cleanup action (SEC-376). Public references across NVD/Red Hat/CNVD confirm the issue and scope, describing an XSS path arising from insufficient input validation in the web application. The comm...

CVE-2018-20922

cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action SEC-376...

CVE-2018-20921

CVE-2018-20921: cPanel before 70.0.23 allows a stored XSS via the WHM action “Delete a DNS Zone” (SEC-375). The event is triggered by unvalidated data in the DNS zone deletion workflow within WHM. The available documents consistently describe the vulnerability as stored XSS affecting cPanel/WHM p...

CVE-2018-20921

cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action SEC-375...

CVE-2018-20920

CVE-2018-20920 : cPanel before 70.0.23 is affected by a stored XSS in the WHM Edit DNS Zone action (SEC-374). Root cause stated in CNVD/Red Hat sources as insufficient validation of client-side data, enabling execution of injected scripts. Affected product: cPanel/WHM (versions prior to 70.0.23)....

CVE-2018-20920

cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-374...

CVE-2018-20919

cPanel before 70.0.23 allows stored XSS via a WHM Create Account action SEC-373...

CVE-2018-20919

cPanel before 70.0.23 is affected by a stored XSS in the WHM Create Account action (SEC-373). Root cause reported as insufficient validation of client-side data in the web application; exploitation could lead to execution of client-side code. Remediation: upgrade to 70.0.23 or later (per CVE cont...

CVE-2016-10851

cPanel/WHM vulnerability CVE-2016-10851 affects cPanel before 11.54.0.4, allowing self-XSS in the WHM PHP Configuration editor (SEC-84). Root cause details aren’t specified beyond the self XSS indication. Impact is limited to the editor’s interface and user interaction, with no explicit exploitat...

CVE-2016-10851

cPanel before 11.54.0.4 allows self XSS in the WHM PHP Configuration editor interface SEC-84...

CVE-2018-20918

CVE-2018-20918: A stored XSS in cPanel prior to 70.0.23 affects WHM DNS Cluster. Multiple sources (NVD, Red Hat, CNVD, CVE list) reiterate that the vulnerability arises due to insufficient validation of client-side data in the web interface. Impact is contextual to web trust and session data, wit...

CVE-2018-20918

cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster SEC-372...

CVE-2018-20916

cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry SEC-370...

CVE-2018-20916

CVE-2018-20916 affects cPanel prior to 70.0.23. The vulnerability is a Stored XSS in WHM via the Edit MX Entry, caused by lack of proper validation of client-side data in the web application. Impact stated as attacker-controlled scripts executed in the victim’s browser. Remediation: upgrade to 70...

CVE-2018-20915

cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-369...

CVE-2016-10853

Summary: CVE-2016-10853 affects cPanel before 11.54.0.4, with a stored XSS vulnerability in the WHM Feature Manager interface (SEC-86). Multiple connected sources (NVD/NVD mirror, Red Hat security page, CNVD) corroborate this description. What’s vulnerable: The WHM Feature Manager component of cP...

CVE-2018-20913

CVE-2018-20913 affects cPanel before 70.0.23. The vulnerability allows an attacker to read the root accesshash via the WHM path /cgi/trustclustermaster.cgi (SEC-364). The available sources describe the vulnerability as an information disclosure condition impacting the root accesshash, with no pub...

CVE-2016-10860

CVE-2016-10860 affects cPanel before 11.54.0.0 and is documented as allowing unauthorized zone modification through the WHM API (SEC-66). The vulnerability is corroborated across multiple sources in the connected documents (NVD entry and Red Hat advisory), which state the same affected software a...