CVE-2019-13387

In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, Reflected XSS in filemanager2.php (parameter fm_current_dir) allows attackers to steal a cookie or…

published July 26, 2019

CVSS
—
EPSS
2%
Percentile
82.2
In the wild
Unconfirmed
What it is

In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, Reflected XSS in filemanager2.php (parameter fm_current_dir) allows attackers to steal a cookie or session, or redirect to a phishing website.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02176 · 82.2th percentile
Published
2019-07-26T12:06Z
EPSS history
Timeline
  • 26 JUL 12:06Z
    In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, Reflected XSS in filemanager2.php (parameter fm_current_dir) allows attackers to steal a cookie or…
    cvelistv5