CVE-2024-53376

CyberPanel versions prior to 2.3.8 are vulnerable to an OS command injection vulnerability. This flaw exists in the /websites/submitWebsiteCreation URI, where the application fails to neutralize shell metacharacters in the phpSelection field. An authenticated remote attacker can exploit this by s...