CVE-2020-11583: Plesk Obsidian

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

A GET-based XSS reflected vulnerability in Plesk Obsidian 18.0.17 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter.

Affected products

• Plesk Obsidian: version 18.0.17 only

Published 2020-08-03. Last modified 2026-06-17.