Stored XSS Vulnerability in WHM Mass Modify Accounts Interface by cPanel

CVE-2026-93697

What is CVE-2026-93697?

A stored cross-site scripting (XSS) vulnerability exists in the WHM Mass Modify Accounts interface, which allows malicious actors to execute arbitrary code. This vulnerability can be exploited by injecting harmful scripts into user inputs that are stored in the system, potentially compromising user accounts and sensitive information. It is critical to address this vulnerability promptly to protect against unauthorized access and data breaches. Patching and securing affected versions is recommended for enhanced security.

References