Vulnerabilities > Cpanel > Cpanel > 56.0.52

DATE CVE VULNERABILITY TITLE RISK
2019-08-02 CVE-2017-18418 Cross-site Scripting vulnerability in Cpanel
cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations (SEC-265).
network
cpanel CWE-79
3.5
2019-08-02 CVE-2017-18417 Cross-site Scripting vulnerability in Cpanel
cPanel before 66.0.2 allows stored XSS during WHM cPAddons installation (SEC-263).
network
cpanel CWE-79
3.5
2019-08-01 CVE-2018-20923 Cross-site Scripting vulnerability in Cpanel
cPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action (SEC-377).
network
cpanel CWE-79
4.3
2019-08-01 CVE-2018-20922 Cross-site Scripting vulnerability in Cpanel
cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action (SEC-376).
network
cpanel CWE-79
4.3
2019-08-01 CVE-2018-20921 Cross-site Scripting vulnerability in Cpanel
cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action (SEC-375).
network
cpanel CWE-79
4.3
2019-08-01 CVE-2018-20920 Cross-site Scripting vulnerability in Cpanel
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-374).
network
cpanel CWE-79
4.3
2019-08-01 CVE-2018-20919 Cross-site Scripting vulnerability in Cpanel
cPanel before 70.0.23 allows stored XSS via a WHM Create Account action (SEC-373).
network
cpanel CWE-79
4.3
2019-08-01 CVE-2018-20918 Cross-site Scripting vulnerability in Cpanel
cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster (SEC-372).
network
cpanel CWE-79
4.3
2019-08-01 CVE-2018-20917 Improper Input Validation vulnerability in Cpanel
cPanel before 70.0.23 allows any user to disable Solr (SEC-371).
local
low complexity
cpanel CWE-20
2.1
2019-08-01 CVE-2018-20916 Cross-site Scripting vulnerability in Cpanel
cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry (SEC-370).
network
cpanel CWE-79
3.5