cPanel before 60.0.25 allows self XSS in the UI_confirm API (SEC-180).
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10781
Reference (s):
- https://documentation.cpanel.net/display/CL/60+Change+Log
Get a Pentest and security assessment of your IT network.
cPanel before 60.0.25 allows self XSS in the UI_confirm API (SEC-180).
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10781
Reference (s):