https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 17:24:02 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-100720 <p>Froxlor 2.0.0 through 2.3.10 is vulnerable to stored cross-site scripting. When a customer (the lowest-privileged authenticated role) uploads an SSL certificate for one of their own domains, the Certificates API add()/update() methods parse it with openssl_x509_parse() and store the issuer organization (issuer[&#39;O&#39;]) value verbatim without sanitization. Froxlor&#39;s table-listing renderer then emits scalar cells through Twig&#39;s `raw` filter, disabling HTML auto-escaping, so when an administrator or reseller opens Domains &gt; SSL certificates the attacker-supplied issuer value executes as script in the privileged user&#39;s session. This crosses a privilege boundary from customer to admin and can result in full administrator account takeover; because a Froxlor admin controls webserver, DNS, and PHP configuration applied by a cron job running as root, the issue can be further escalated to command execution as root on the managed server. The issue is fixed in Froxlor 2.3.12.</p> <p>Froxlor 2.0.0 through 2.3.10 is vulnerable to stored cross-site scripting. When a customer (the lowest-privileged authenticated role) uploads an SSL certificate for one of their own domains, the Certificates API add()/update() methods parse it with openssl_x509_parse() and store the issuer organization (issuer[&#39;O&#39;]) value verbatim without sanitization. Froxlor&#39;s table-listing renderer then emits scalar cells through Twig&#39;s `raw` filter, disabling HTML auto-escaping, so when an administrator or reseller opens Domains &gt; SSL certificates the attacker-supplied issuer value executes as script in the privileged user&#39;s session. This crosses a privilege boundary from customer to admin and can result in full administrator account takeover; because a Froxlor admin controls webserver, DNS, and PHP configuration applied by a cron job running as root, the issue can be further escalated to command execution as root on the managed server. The issue is fixed in Froxlor 2.3.12.</p> https://db.gcve.eu/vuln/fkie_cve-2026-100720 https://db.gcve.eu/vuln/ghsa-mmqp-fgp4-5q7j <p>Froxlor 2.0.0 through 2.3.10 is vulnerable to stored cross-site scripting. When a customer (the lowest-privileged authenticated role) uploads an SSL certificate for one of their own domains, the Certificates API add()/update() methods parse it with openssl_x509_parse() and store the issuer organization (issuer[&#39;O&#39;]) value verbatim without sanitization. Froxlor&#39;s table-listing renderer then emits scalar cells through Twig&#39;s `raw` filter, disabling HTML auto-escaping, so when an administrator or reseller opens Domains &gt; SSL certificates the attacker-supplied issuer value executes as script in the privileged user&#39;s session. This crosses a privilege boundary from customer to admin and can result in full administrator account takeover; because a Froxlor admin controls webserver, DNS, and PHP configuration applied by a cron job running as root, the issue can be further escalated to command execution as root on the managed server. The issue is fixed in Froxlor 2.3.12.</p> <p>Froxlor 2.0.0 through 2.3.10 is vulnerable to stored cross-site scripting. When a customer (the lowest-privileged authenticated role) uploads an SSL certificate for one of their own domains, the Certificates API add()/update() methods parse it with openssl_x509_parse() and store the issuer organization (issuer[&#39;O&#39;]) value verbatim without sanitization. Froxlor&#39;s table-listing renderer then emits scalar cells through Twig&#39;s `raw` filter, disabling HTML auto-escaping, so when an administrator or reseller opens Domains &gt; SSL certificates the attacker-supplied issuer value executes as script in the privileged user&#39;s session. This crosses a privilege boundary from customer to admin and can result in full administrator account takeover; because a Froxlor admin controls webserver, DNS, and PHP configuration applied by a cron job running as root, the issue can be further escalated to command execution as root on the managed server. The issue is fixed in Froxlor 2.3.12.</p> https://db.gcve.eu/vuln/ghsa-mmqp-fgp4-5q7j