Description
Froxlor Server Management Panel 0.10.16 contains a persistent cross-site scripting vulnerability in customer registration input fields. Attackers can inject malicious scripts through username, name, and firstname parameters to execute code when administrators view customer traffic modules.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Froxlor | Froxlor Froxlor Server Management Panel | 0.10.16 | — |
Advisories 1
- WID-SEC-2026-0236 Froxlor Server Management Panel: Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · Jan 27, 2026
References
- ExploitDB-49063 exploit
- Official Froxlor Homepage product
- Froxlor Download Page product
- Vulnerability Lab Advisory vendor-advisory
- Vulnerability Lab Profile vendor-advisory
- Researcher Profile vendor-advisory
- VulnCheck Advisory: Froxlor Froxlor Server Management Panel 0.10.16 - Persistent Cross-Site Scripting third-party-advisory