CVE-2026-93697

Summary

The flaw is a stored XSS vulnerability in the WHM Mass Modify Accounts interface, allowing attackers to inject arbitrary code, leading to potential full system compromise.

Exploitability

Exploitation is relatively easy given user interaction is required, and the attacker can inject malicious scripts through account modifications.

Blast radius

If exploited, the impact could be severe, potentially leading to full control of the affected server and all hosted accounts.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the WHM Mass Modify Accounts feature until a patch is available, or upgrade to the latest version of the affected software.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.