What’s Vulnerable › Vulnerabilities

CVE-2017-11441

• Severity: medium (CVSS 5.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-07-19 · updated 2026-06-17
• Weakness: CWE-79

Description

The WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x before 60.0.45, 62.x before 62.0.27, 64.x before 64.0.33, and 66.x before 66.0.2 has XSS via a locale filename, aka SEC-297.

Affected products

• WebPros WHM: through 56.0.50; 58.0.3, 58.0.4, 58.0.5, 58.0.6, 58.0.7, 58.0.8 (+107)

References

• https://news.cpanel.com/cpanel-tsr-2017-0004-full-disclosure/
• https://news.cpanel.com/cpanel-tsr-2017-0004-full-disclosure/

Get alerted when CVE-2017-11441 or the next vulnerability affects your stack