writeups.xyz / Multiple Vulnerabilities In cPanel/WHM

Submitter : c2a

Date: 10 August 2021

Bounty : undisclosed

Vulnerabilities :

• XXE
• Stored XSS
• Privilege Escalation
• CSRF
• Cross-Site WebSocket Hijacking (CSWH)

Programs :

• CPanel

Authors :

• Adrian Tiron (@Adrian__t)

Link :
https://www.fortbridge.co.uk/research/multiple-vulnerabilities-in-cpanel-whm/