CVE-2018-20874: XSS
Published Aug 1, 2019
·Updated
cPanel before 74.0.8 allows self XSS in the WHM "Create a New Account" interface (SEC-428).
Affected Software
2 affected components
Cpanel Cpanel>=69.9999.122<70.0.57
Cpanel Cpanel>=73.9980.0<74.0.8
Event History
Aug 1, 2019
CVE Published
via MITRE·12:40 PM
Data Sourced
via MITRE·12:40 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20874?
CVE-2018-20874 is classified as a low-severity vulnerability, affecting the cPanel WHM interface.
2
How do I fix CVE-2018-20874?
To mitigate CVE-2018-20874, upgrade cPanel to version 74.0.8 or higher.
3
Which versions of cPanel are affected by CVE-2018-20874?
CVE-2018-20874 affects cPanel versions prior to 74.0.8 and versions between 69.9999.122 and 70.0.57.
4
What type of vulnerability is CVE-2018-20874?
CVE-2018-20874 is a self XSS vulnerability found in the 'Create a New Account' interface of cPanel.
5
Is there a workaround for CVE-2018-20874?
There is no known workaround for CVE-2018-20874; upgrading to a secure version is recommended.