VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Aug 30, 2018· Updated Jun 17, 2026

CVE-2018-16236

CVE-2018-16236

Description

cPanel through 74 allows XSS via a crafted filename in the logs subdirectory of a user account, because the filename is mishandled during frontend/THEME/raw/index.html rendering.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • CPanel/Cpanel2 versions
    cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*range: <=74
    • (no CPE)range: <=74

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.