CVE-2018-16236: Improper Neutralization of Input During Web Page Generation

cPanel through 74 allows XSS via a crafted filename in the logs subdirectory of a user account, because the filename is mishandled during frontend/THEME/raw/index.html rendering...

PT-2018-13449

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 74 Description The issue allows for XSS attacks via a crafted filename in the logs subdirectory of a user account. This occurs because the filename is mishandled during rendering of frontend/THEME/raw/index.html...