CVE-2019-10893

CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version) and 0.9.8.753 (Pro) is vulnerable to Stored/Persistent XSS for Admin Email…

published April 18, 2019

CVSS
—
EPSS
3%
Percentile
86.5
In the wild
Unconfirmed
What it is

CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version) and 0.9.8.753 (Pro) is vulnerable to Stored/Persistent XSS for Admin Email fields on the "CWP Settings > "Edit Settings" screen. By changing the email ID to any XSS Payload and clicking on Save Changes, the XSS Payload will execute.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02826 · 86.5th percentile
Published
2019-04-18T19:50Z
EPSS history
Timeline
  • 18 APR 19:50Z
    CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version) and 0.9.8.753 (Pro) is vulnerable to Stored/Persistent XSS for Admin Email…
    cvelistv5