CVE-2019-10261

CentOS Web Panel (CWP) 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functions" "Edit Nameservers IPs" action.

Score

CVSS 3.0 4.8 Medium

Status

Modified - cve@mitre.org

Published

2019-04-03

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Centos Web Panel (Centos-webpanel)

References

• http://www.securityfocus.com/bid/107769
• https://packetstormsecurity.com/files/152303/CentOS-Web-Panel-0.9.8.789-Cross-Site-Scripting.html
• https://www.exploit-db.com/exploits/46629