← Back to browse · API

CVE-2023-29489

Severity
MEDIUM
CVSS
5.3
EPSS
0.65533
Risk score
44.14
CISA KEV
No
PoC
No
Published
2023-04-27
Modified
2024-08-02
First seen
2026-08-08
Aliases
EUVD-2023-33056, GHSA-84FM-C8WR-CF69
Products
n/a:n/a n/a
Sources
euvd EUVD-2023-33056

Description

An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31.

References