What’s Vulnerable › Vulnerabilities
CVE-2003-0521
- Severity: medium (CVSS 6.8 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.6% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2003-08-18 · updated 2026-06-16
Description
Cross-site scripting (XSS) vulnerability in cPanel 6.4.2 allows remote attackers to insert arbitrary HTML and possibly gain cPanel administrator privileges via script in a URL that is logged but not properly quoted when displayed via the (1) Error Log or (2) Latest Visitors screens.
Affected products
- WebPros cPanel: 5.0, 5.3, 6.0, 6.2, 6.4, 6.4.1 (+2)
References
Get alerted when CVE-2003-0521 or the next vulnerability affects your stack