| Package | Affected versions | Patched versions |
|---|---|---|
| cpanel | ≤ 74 |
cPanel through 74 allows XSS via a crafted filename in the logs subdirectory of a user account, because the filename is mishandled during frontend/THEME/raw/index.html rendering.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free