CVE-2018-20903

cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface SEC-421...

CVE-2018-20875

cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface SEC-433...

CVE-2018-20874

cPanel before 74.0.8 allows self XSS in the WHM "Create a New Account" interface SEC-428...

CVE-2018-20876

cPanel before 74.0.8 allows self XSS in the Site Software Moderation interface SEC-434...

CVE-2018-20877

cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...

Design/Logic Flaw

cPanel before 74.0.8 allows self XSS in the WHM "Create a New Account" interface SEC-428...

Design/Logic Flaw

cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface SEC-433...

Cross site scripting

cPanel before 74.0.8 allows self XSS in the Site Software Moderation interface SEC-434...

CVE-2018-20877

cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...

CVE-2018-20876

cPanel before 74.0.8 allows self XSS in the Site Software Moderation interface SEC-434...

CVE-2018-20876

CVE-2018-20876 affects cPanel prior to version 74.0.8, where the Site Software Moderation interface is vulnerable to self XSS. The vulnerability arises from insufficient validation of client-side data in the web application, enabling execution of injected scripts in the context of the moderation ...

CVE-2018-20875

cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface SEC-433...

CVE-2018-20874

cPanel before 74.0.8 allows self XSS in the WHM "Create a New Account" interface SEC-428...

CVE-2018-20865

cPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field SEC-459...

Design/Logic Flaw

cPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field SEC-459...

CVE-2018-20865

cPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field SEC-459...

CVE-2018-20865

CVE-2018-20865 affects cPanel prior to 76.0.8, where a Self XSS flaw exists in the WHM Addtional Backup Destination field (SEC-459). Exploitation context is not detailed in the provided documents, but the vulnerability is tied to user-supplied content in the WHM backup destination setting, enabli...

CVE-2019-14387

cPanel before 82.0.2 has Self XSS in the cPanel and webmail master templates SEC-506...

CVE-2019-14387

cPanel before 82.0.2 has Self XSS in the cPanel and webmail master templates SEC-506...

Cross site scripting

cPanel before 82.0.2 has Self XSS in the cPanel and webmail master templates SEC-506...