4 matches found
CVE-2016-10782
cPanel before 60.0.25 allows self stored XSS in postgres API1 listdbs SEC-181...
5.4CVSS5.3AI score0.00531EPSS
SaveExploits0References1
Cross site scripting
cPanel before 60.0.25 allows self stored XSS in postgres API1 listdbs SEC-181...
3.5CVSS6AI score0.00531EPSS
SaveExploits0References1Affected Software1
CVE-2016-10782
CVE-2016-10782 affects cPanel versions prior to 60.0.25, with a self-stored XSS in the postgres API1 listdbs. The root cause is insufficient validation of client-side data in the web application, allowing injected scripts to run when listing databases. Impact: stored XSS in affected user sessions...
5.4CVSS5.2AI score0.00531EPSS
SaveExploits0References1Affected Software1
20