| Package | Affected versions | Patched versions |
|---|---|---|
| cpanel | = 5.0= 5.3= 6.0= 6.2= 6.4= 6.4.1= 6.4.2= 6.4.2_stable_48 |
Cross-site scripting (XSS) vulnerability in cPanel 6.4.2 allows remote attackers to insert arbitrary HTML and possibly gain cPanel administrator privileges via script in a URL that is logged but not properly quoted when displayed via the (1) Error Log or (2) Latest Visitors screens.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free