UNKNOWN NVD

CVE-2026-50980

Cross-Site Scripting (XSS) vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote attackers to execute arbitrary JavaScrip

Cross-Site Scripting (XSS) vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote attackers to execute arbitrary JavaScript and perform session hijacking via a crafted DNS TXT record

References

http://osbil.com
http://womopanel.com
https://github.com/bugresearch/CVE-2026-50980

Published: 2026-08-28 · Source: NVD · Feed updated: 2026-08-28

This unknown severity vulnerability was published on 2026-08-28 via NVD.

vulnfeed aggregates 11493 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.