CVE-2019-20493

cPanel before 82.0.18 allows self-XSS because JSON string escaping is mishandled (SEC-520)

published March 17, 2020

CVSS
—
EPSS
1%
Percentile
54.2
In the wild
Unconfirmed
What it is

cPanel before 82.0.18 allows self-XSS because JSON string escaping is mishandled (SEC-520).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00744 · 54.2th percentile
Published
2020-03-17T14:24Z
EPSS history
Timeline
  • 17 MAR 14:24Z
    cPanel before 82.0.18 allows self-XSS because JSON string escaping is mishandled (SEC-520)
    cvelistv5