CVE-2018-20920

CVE-2018-20920 : cPanel before 70.0.23 is affected by a stored XSS in the WHM Edit DNS Zone action (SEC-374). Root cause stated in CNVD/Red Hat sources as insufficient validation of client-side data, enabling execution of injected scripts. Affected product: cPanel/WHM (versions prior to 70.0.23)....

CVE-2018-20920: Improper Neutralization of Input During Web Page Generation

cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-374...