CVE-2016-10774: XSS
Published Aug 5, 2019
·Updated
cPanel before 60.0.25 allows self XSS in the tailea4migration.cgi interface (SEC-172).
Affected Software
1 affected component
Cpanel Cpanel>=59.9999.58<60.0.25
Event History
Aug 5, 2019
CVE Published
via MITRE·12:57 PM
Data Sourced
via MITRE·12:57 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-10774?
CVE-2016-10774 is classified as a moderate severity vulnerability that allows self XSS in the tail_ea4_migration.cgi interface.
2
How do I fix CVE-2016-10774?
To mitigate CVE-2016-10774, users should upgrade to cPanel version 60.0.25 or later.
3
Which versions of cPanel are affected by CVE-2016-10774?
CVE-2016-10774 affects cPanel versions prior to 60.0.25, specifically those versioned as 59.9999.58 and below.
4
What is the impact of CVE-2016-10774?
The impact of CVE-2016-10774 includes the possibility of self XSS attacks that could compromise user session integrity in cPanel.
5
Is CVE-2016-10774 a critical vulnerability?
CVE-2016-10774 is not considered critical, but it can pose risks to user accounts if not addressed.