Search vulnerabilities

Results 1

Export CSV
CVE-2026-50980

Cross‑Site Scripting vulnerability in oPanel DNS lookup enabling session hijacking via crafted DNS TXT record

Cross-Site Scripting (XSS) vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote attackers to execute arbitrary JavaScript and perform session hijacking via a crafted DNS TXT record

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Products