CVE-2019-10261: Centos-Webpanel Centos Web Panel

Medium severity, CVSS 4.8. EPSS: 2.3% chance of exploitation in the next 30 days.

CentOS Web Panel (CWP) 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functions" "Edit Nameservers IPs" action.

Affected products

Published 2019-04-03. Last modified 2026-06-17.