CVE-2018-20928: XSS
Published Aug 1, 2019
·Updated
cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface (SEC-391).
Affected Software
3 affected components
Cpanel Cpanel>=61.9999.55<62.0.42
Cpanel Cpanel>=67.9999.64<68.0.33
Cpanel Cpanel>=69.9999.122<70.0.23
Event History
Aug 1, 2019
CVE Published
via MITRE·03:46 PM
Data Sourced
via MITRE·03:46 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20928?
CVE-2018-20928 is considered a medium severity vulnerability due to its potential for stored cross-site scripting (XSS) attacks.
2
How do I fix CVE-2018-20928?
To fix CVE-2018-20928, upgrade to cPanel version 70.0.23 or later.
3
What software is affected by CVE-2018-20928?
CVE-2018-20928 affects cPanel versions before 70.0.23, specifically between versions 61.9999.55 and 62.0.42, 67.9999.64 and 68.0.33, and 69.9999.122 and 70.0.23.
4
What type of vulnerability is CVE-2018-20928?
CVE-2018-20928 is a stored cross-site scripting (XSS) vulnerability.
5
Can CVE-2018-20928 be exploited remotely?
Yes, CVE-2018-20928 can be exploited remotely through the compromised cpaddons vendor interface.