Cross-site scripting (XSS) vulnerability in the Entropy Chat script in cPanel 10.2.0-R82 and 10.6.0-R137 allows remote malicious users to inject arbitrary web script or HTML via a chat message containing Javascript in style attributes in tags such as <b>, which are processed by Internet Explorer.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
cpanel cpanel 10.2.0_r82 |
||
cpanel cpanel 10.6.0_r137 |