Design/Logic Flaw

cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface SEC-421...

CVE-2018-20903

CVE-2018-20903 concerns cPanel prior to 71.9980.37, where the WHM Backup Configuration interface is vulnerable to self-XSS (SEC-421). The root cause is user input not properly validated client-side, allowing injected script when viewed in the backup config context. Impact is self-XSS in the inter...