CVE Catalog
CVE-2026-93697
CriticalCVSS 9.0Exploitation Probability (EPSS)
Low risk0.40%
32th percentile - higher than 32% of all known CVEs
Summary
There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface.
Risk Assessment
An attacker can inject a malicious script that executes in the administrator's browser, potentially leading to session theft or account takeover.
Recommendation
It is recommended to update WHM to the latest version and apply input filters for user data.
Other vulnerabilities in WHM
Original NVD description (English source)
There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS