Cross site scripting

cPanel before 60.0.25 allows self stored XSS in the listftpstable API SEC-178...

CVE-2016-10773

CVE-2016-10773 affects cPanel prior to 60.0.25, where a format-string injection bug exists in how exception messages are handled (SEC-171). The NVD lists CVSSv3 base score 8.8 (HIGH) and CVSSv2 6.5 (MEDIUM) with network access and low attack complexity, indicating potential remote impact without ...