CVE-2018-16236
cPanel through 74 allows XSS via a crafted filename in the logs subdirectory of a user account, because the filename is
cPanel through 74 allows XSS via a crafted filename in the logs subdirectory of a user account, because the filename is mishandled during frontend/THEME/raw/index.html rendering.
MEDIUM · CVSS 6.1
EPSS 0.00258
Schedule remediation
- Public exploit or PoC is available
Sigma rules0
YARA rules0