cPanel before 82.0.18 allows self-XSS because JSON string escaping is mishandled (SEC-520).

Published Mar 17, 2020 · Updated Aug 5, 2024 · Assigned by mitre