CVE-2019-10261

Name: CVE-2019-10261
Creator: NVD / NIST
Published: 2019-04-03T15:29:01.617+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 2.38%

Last modified Jun 17, 2026

CVE-2019-10261 is a vulnerability of currently unknown severity. CentOS Web Panel (CWP) 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functions" "Edit Nameservers IPs" action.. EPSS estimates a 2.38% chance of exploitation in the next 30 days.

Description

CentOS Web Panel (CWP) 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functions" "Edit Nameservers IPs" action.

Metrics

EPSS Probability

2.38%

81.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-79

Affected Software

Vendor	Product	Versions
Centos-Webpanel	Centos Web Panel	0.9.8.789

References

http://www.securityfocus.com/bid/107769Third Party Advisory, VDB Entry
https://packetstormsecurity.com/files/152303/CentOS-Web-Panel-0.9.8.789-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/46629Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/107769Third Party Advisory, VDB Entry
https://packetstormsecurity.com/files/152303/CentOS-Web-Panel-0.9.8.789-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/46629Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Apr 3, 2019
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2019-10261?

CentOS Web Panel (CWP) 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functions" "Edit Nameservers IPs" action.

How severe is CVE-2019-10261?

Severity scoring for CVE-2019-10261 is pending analysis. The EPSS model estimates a 2.38% probability of exploitation in the next 30 days.

How do I fix CVE-2019-10261?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-10261?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST