CVE-2024-56112

CyberPanel (aka Cyber Panel) before f0cf648 allows XSS via token or username to plogical/phpmyadminsignin.php.

Score

CVSS 3.1 6.1 Medium

Status

Analyzed - cve@mitre.org

Published

2024-12-16

Last modified

2024-12-16

Weaknesses

CWE-79

Affected products

• Cyberpanel (Cyberpanel)

References

• https://cyberpanel.net/
• https://github.com/usmannasir/cyberpanel/commit/f0cf648c7851c96c36bb0c390d13e60931f45900