CVE-2019-10893: XSS
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version) and 0.9.8.753 (Pro) is vulnerable to Stored/Persistent XSS for Admin Email fields on the "CWP Settings > "Edit Settings" screen. By changing the email ID to any XSS Payload and clicking on Save Changes, the XSS Payload will execute.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10893?
CVE-2019-10893 has a medium severity rating due to the potential for stored cross-site scripting (XSS) attacks affecting the CentOS Web Panel.
How do I fix CVE-2019-10893?
To fix CVE-2019-10893, update CentOS Web Panel to the latest version where the XSS vulnerability is patched.
What systems are affected by CVE-2019-10893?
CVE-2019-10893 affects CentOS Web Panel versions 0.9.8.753 (Pro) and 0.9.8.793 (Free/Open Source).
What type of vulnerability is CVE-2019-10893?
CVE-2019-10893 is classified as a stored persistent cross-site scripting (XSS) vulnerability.
Could CVE-2019-10893 lead to data theft?
Yes, CVE-2019-10893 could potentially lead to data theft as attackers may exploit the XSS vulnerability to execute malicious scripts.