CVE-2016-10860

cPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API SEC-66...

CVE-2016-10853

cPanel before 11.54.0.4 allows stored XSS in the WHM Feature Manager interface SEC-86...

CVE-2018-20901

cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface SEC-400...

CVE-2018-20901

cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface SEC-400...

CVE-2016-10851

cPanel before 11.54.0.4 allows self XSS in the WHM PHP Configuration editor interface SEC-84...

Cross site scripting

cPanel before 70.0.23 allows stored XSS via a WHM Create Account action SEC-373...

Cross site scripting

cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action SEC-375...

Design/Logic Flaw

cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface SEC-400...

Cross site scripting

cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-374...

Cross site scripting

cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-369...

Design/Logic Flaw

cPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API SEC-66...

Cross site scripting

cPanel before 11.54.0.4 allows stored XSS in the WHM Feature Manager interface SEC-86...

Design/Logic Flaw

cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface SEC-421...

Cross site scripting

cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action SEC-376...

Cross site scripting

cPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action SEC-377...

Cross site scripting

cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry SEC-370...

Design/Logic Flaw

cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface SEC-357...

CVE-2018-20923

CVE-2018-20923 affects cPanel prior to version 70.0.23. The vulnerability is a stored XSS in the WHM Synchronize DNS Records action (SEC-377), enabling script execution in a victim’s browser. Public documents consistently describe it as a stored XSS in the web interface, with the NVD metrics indi...

CVE-2018-20922

cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action SEC-376...

CVE-2018-20922

CVE-2018-20922 affects cPanel prior to 70.0.23, where a stored XSS vulnerability exists via a WHM DNS Cleanup action (SEC-376). Public references across NVD/Red Hat/CNVD confirm the issue and scope, describing an XSS path arising from insufficient input validation in the web application. The comm...