Vulnerabilities > Cpanel > Cpanel > 70.0.27

DATE CVE VULNERABILITY TITLE RISK
2018-08-30 CVE-2018-16236 Cross-site Scripting vulnerability in Cpanel
cPanel through 74 allows XSS via a crafted filename in the logs subdirectory of a user account, because the filename is mishandled during frontend/THEME/raw/index.html rendering.
network
cpanel CWE-79
4.3