Design/Logic Flaw

cPanel before 60.0.25 allows stored XSS in api1listautoresponders SEC-179...

CVE-2016-10779

cPanel before 60.0.25 allows stored XSS in api1listautoresponders SEC-179...

CVE-2016-10779

CVE-2016-10779 affects cPanel prior to 60.0.25, with a stored XSS in api1_listautoresponders due to insufficient input validation in the web application. The vulnerability can lead to execution of client-side code in affected sessions. Remediation: upgrade to version 60.0.25 or later (as noted in...