CVE-2017-11441
N/A
Published: July 19, 2017 at 07:00 AM UTC
Updated: June 17, 2026 at 01:01 AM UTC
1 product affected across 1 vendorWhm
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.5%
Description
The WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x before 60.0.45, 62.x before 62.0.27, 64.x before 64.0.33, and 66.x before 66.0.2 has XSS via a locale filename, aka SEC-297.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 56.0.5058.0.1158.0.1258.0.1358.0.1758.0.1958.0.2058.0.2358.0.2458.0.2558.0.2658.0.2758.0.2858.0.2958.0.358.0.3058.0.3158.0.3258.0.3458.0.3658.0.3758.0.458.0.4158.0.4358.0.4458.0.4558.0.4658.0.4758.0.4858.0.4958.0.558.0.5058.0.5158.0.658.0.758.0.860.0.1060.0.1160.0.1260.0.1360.0.1460.0.1560.0.1760.0.1860.0.1960.0.2260.0.2460.0.2560.0.2660.0.2760.0.2860.0.360.0.3160.0.3260.0.3460.0.3560.0.3660.0.3760.0.3860.0.3960.0.460.0.4260.0.4360.0.4460.0.560.0.660.0.860.0.962.0.162.0.1062.0.1162.0.1262.0.1462.0.1562.0.1662.0.1762.0.1962.0.262.0.2062.0.2362.0.2462.0.2662.0.462.0.562.0.662.0.762.0.862.0.964.0.064.0.164.0.1164.0.1264.0.1364.0.1464.0.1564.0.1764.0.1864.0.1964.0.264.0.2064.0.2164.0.2264.0.2464.0.2764.0.2864.0.2964.0.364.0.3064.0.3164.0.3264.0.464.0.764.0.966.0.1
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (1)
x_refsource_CONFIRMVendor Advisory
Source: [email protected]
https://news.cpanel.com/cpanel-tsr-2017-0004-full-disclosure/Quick Info
StatusMODIFIED
CWE
CWE-79
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card