medium6.1
CVE-2018-20928
cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface (SEC-391).
Impact
cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface (SEC-391).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cpanel | Cpanel | from 61.9999.55 before 62.0.42 from 67.9999.64 before 68.0.33 from 69.9999.122 before 70.0.23 |