CVE-2020-10114

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

cPanel before 84.0.20 allows stored self-XSS via the HTML file editor (SEC-535).

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Mar 17, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-101157.2cPanel before 84.0.20, when PowerDNS is used, allows arbitrary code execution as root via dnsadmin. (SEC-537).CVE-2020-101165.3cPanel before 84.0.20 allows attackers to bypass intended restrictions on features and demo accounts via WebDisk UAPI calls (SEC-541).CVE-2020-101179.1cPanel before 84.0.20 mishandles enforcement of demo checks in the Market UAPI namespace (SEC-542).CVE-2020-101189.1cPanel before 84.0.20 allows a demo account to modify files via Branding API calls (SEC-543).CVE-2020-101199.8cPanel before 84.0.20 allows a demo account to achieve remote code execution via a cpsrvd rsync shell (SEC-544).CVE-2020-10128.8<p>An elevation of privilege vulnerability exists in the way that the Wininit.dll handles objects in memory. An attacker who successfully exCVE-2020-101207.2cPanel before 84.0.20 allows resellers to achieve remote code execution as root via a cpsrvd rsync shell (SEC-545).CVE-2020-101219.8cPanel before 84.0.20 allows a demo account to achieve code execution via PassengerApps APIs (SEC-546).CVE-2020-101226.5cPanel before 84.0.20 allows a webmail or demo account to delete arbitrary files (SEC-547).CVE-2020-101235.3The currency dispenser of NCR SelfSev ATMs running APTRA XFS 05.01.00 or earlier does not adequately authenticate session key generation reqCVE-2020-101247.1NCR SelfServ ATMs running APTRA XFS 05.01.00 do not encrypt, authenticate, or verify the integrity of messages between the BNA and the host CVE-2020-101257.6NCR SelfServ ATMs running APTRA XFS 04.02.01 and 05.01.00 implement 512-bit RSA certificates to validate bunch note acceptor (BNA) software
CVE-2020-10114: Medium severity, CVSS 6.1 | Vulnix