CVE-2019-16295

Stored XSS in filemanager2.php in CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.885 exists via the cmd_arg parameter

published October 31, 2019

CVSS
—
EPSS
0%
Percentile
40.3
In the wild
Unconfirmed
What it is

Stored XSS in filemanager2.php in CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.885 exists via the cmd_arg parameter. This can be exploited by a local attacker who supplies a crafted filename within a directory visited by the victim.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00478 · 40.3th percentile
Published
2019-10-31T20:59Z
EPSS history
Timeline
  • 31 OCT 20:59Z
    Stored XSS in filemanager2.php in CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.885 exists via the cmd_arg parameter
    cvelistv5