cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface (SEC-577).

Published Nov 27, 2020 · Updated Aug 4, 2024 · Assigned by mitre