CVE Catalog
CVE-2026-93697
CriticalCVSS 9.0Summary
There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface.
Risk Assessment
An attacker can inject a malicious script that executes in the administrator's browser, potentially leading to session theft or account takeover.
Recommendation
It is recommended to update WHM to the latest version and apply input filters for user data.
Other vulnerabilities in WHM
Original NVD description (English source)
There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS