) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Search Results (Refine Search)
- Keyword (text search): xss
| Vuln ID | Summary | CVSS Severity |
|---|---|---|
| CVE-2018-20953 |
cPanel before 68.0.27 allows self XSS in the WHM listips interface (SEC-389). Published: August 01, 2019; 1:15:13 PM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2018-20951 |
cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config (SEC-387). Published: August 01, 2019; 1:15:13 PM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2018-20950 |
cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer (SEC-386). Published: August 01, 2019; 1:15:13 PM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2018-20949 |
cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor (SEC-385). Published: August 01, 2019; 1:15:13 PM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2018-20948 |
cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration (SEC-383). Published: August 01, 2019; 1:15:13 PM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2016-10827 |
cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences (SEC-96). Published: August 01, 2019; 1:15:11 PM -0400 |
V4.0:(not available) V3.0: 5.4 MEDIUM V2.0: 3.5 LOW |
| CVE-2016-10822 |
cPanel before 55.9999.141 allows self XSS in X3 Reseller Branding Images (SEC-88). Published: August 01, 2019; 1:15:11 PM -0400 |
V4.0:(not available) V3.0: 5.4 MEDIUM V2.0: 3.5 LOW |
| CVE-2018-20935 |
cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action (SEC-412). Published: August 01, 2019; 12:15:14 PM -0400 |
V4.0:(not available) V3.0: 5.4 MEDIUM V2.0: 3.5 LOW |
| CVE-2018-20933 |
cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action (SEC-410). Published: August 01, 2019; 12:15:14 PM -0400 |
V4.0:(not available) V3.0: 5.4 MEDIUM V2.0: 3.5 LOW |
| CVE-2018-20928 |
cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface (SEC-391). Published: August 01, 2019; 12:15:13 PM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2019-14472 |
Zurmo 3.2.7-2 has XSS via the app/index.php/zurmo/default PATH_INFO. Published: August 01, 2019; 11:15:15 AM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2019-14471 |
TestLink 1.9.19 has XSS via the error.php message parameter. Published: August 01, 2019; 11:15:15 AM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2018-20923 |
cPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action (SEC-377). Published: August 01, 2019; 11:15:14 AM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2018-20922 |
cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action (SEC-376). Published: August 01, 2019; 11:15:14 AM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2018-20921 |
cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action (SEC-375). Published: August 01, 2019; 11:15:14 AM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2018-20920 |
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-374). Published: August 01, 2019; 11:15:14 AM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2018-20919 |
cPanel before 70.0.23 allows stored XSS via a WHM Create Account action (SEC-373). Published: August 01, 2019; 11:15:14 AM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2018-20918 |
cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster (SEC-372). Published: August 01, 2019; 11:15:14 AM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2018-20916 |
cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry (SEC-370). Published: August 01, 2019; 11:15:14 AM -0400 |
V4.0:(not available) V3.0: 5.4 MEDIUM V2.0: 3.5 LOW |
| CVE-2018-20915 |
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-369). Published: August 01, 2019; 11:15:14 AM -0400 |
V4.0:(not available) V3.0: 5.4 MEDIUM V2.0: 3.5 LOW |