CVE-2004-1420: WHM Autopilot

Medium severity, CVSS 4.3. EPSS: 4% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in header.php in WHM AutoPilot 2.4.6.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) site_title or (2) http_images parameter.

Affected products

• WHM Autopilot: version 2.4.5 only; version 2.4.6 only; version 2.4.6.5 only

Published 2004-12-31. Last modified 2026-06-16.