CVE-2016-10767

cPanel before 60.0.25 allows stored XSS in the WHM Repair Mailbox Permissions interface SEC-159...

CVE-2016-10767

CVE-2016-10767 affects cPanel before 60.0.25, allowing stored XSS in the WHM Repair Mailbox Permissions interface (SEC-159). The vulnerability stems from improper input validation of client data, enabling stored script execution. Remediation: upgrade to cPanel 60.0.25 or later (apply the security...