Description
An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 17 repositories · most starred shown
-
0-d3y/CVE-2023-29489 ★ 13 · May 17, 2023
Mass Scaning vulnerability in Cpanel [XSS]
-
whalebone7/EagleEye ★ 7 · May 1, 2023
To filter the actual vulnerable URLs from the screenshots, you can use the ee.sh script. Simply run ./ee.sh -f "path/to/index_screenshot.txt" -k "hacked" and the script will filter the URLs that cont…
-
mdaseem03/cpanel_xss_2023 ★ 4 · Jan 23, 2024
cpanel_xss_2023 is a simple Python script designed for finding CVE-2023-29489 vulnerability in cpanel.
-
xKore123/cPanel-CVE-2023-29489 ★ 3 · Apr 27, 2023
-
Thuankobtcode/CVE-2023-29489 ★ 2 · Jun 5, 2025
-
Makurorororororororo/Validate-CVE-2023-29489-scanner- ★ 2 · Dec 23, 2023
-
ipk1/CVE-2023-29489.py ★ 2 · Apr 28, 2023
a pyhton script to test all results from shodan for cPanel CVE-2023-29489, credits to @assetnote, I just automate
-
Abdullah7-ma/CVE-2023-29489 ★ 0 · Jun 1, 2023
CVE-2023-29489-XSS
-
Mostafa-Elguerdawi/CVE-2023-29489 ★ 0 · Apr 29, 2023
-
learnerboy88/CVE-2023-29489 ★ 0 · Apr 27, 2023
Nuclei template for CVE-2023-29489
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- cPanel < 11.109.9999.116 - Cross-Site Scripting http/cves/2023/CVE-2023-29489.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.