4 matches found
CVE-2018-20928
cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface SEC-391...
6.1CVSS6AI score0.00647EPSS
SaveExploits0References2
Cross site scripting
cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface SEC-391...
4.3CVSS5.9AI score0.00647EPSS
SaveExploits0References2Affected Software1
CVE-2018-20928
cPanel before 70.0.23 is affected by a stored XSS via the cpaddons vendor interface (SEC-391). Several sources describe this as a cross-site scripting vulnerability with client-side code execution potential due to improper validation of input data. No remediation details are provided in the docum...
6.1CVSS5.9AI score0.00647EPSS
SaveExploits0References2Affected Software1
20