CVE-2018-20901

CVE-2018-20901 affects cPanel before 71.9980.37 and enables Remote-Stored XSS in the WHM Save Theme Interface (SEC-400). The incident is described as XSS that can be triggered remotely via the Save Theme UI, with a CVSS v3 base score of 6.1 (MEDIUM) and CVSS v2 base score 4.3 (MEDIUM). The availa...