Zurück zu den Sicherheitshinweisen

Security Advisory: WHMCS Stored XSS

This is a security release for WHMCS. Update the product on every affected server to the patched release — there is no workaround, and unpatched servers remain exposed until updated.

Medium
WHMCS

Betroffene Versionen

8.7.0 and earlier

Gepatchte Version

8.7.1

Standard-Update-Befehl

yum update -y

Fix-Befehle

Any supported OS

cd /var/www/html
php composer.phar update whmcs/core

Was das unter einer SharedLicense-Lizenz bedeutet

Your SharedLicense license itself is not affected — this is a change in WHMCS software, not in licensing. Apply it on every affected server: update to the fixed release from the WHMCS Admin Area. Licenses keep working through updates; nothing needs re-issuing or re-activating.

A stored cross-site scripting (XSS) vulnerability was found in the WHMCS admin panel, allowing an authenticated user to inject malicious scripts.

Referenzen

Sicherheitshinweise

Verwandte Warnhinweise

WHMCS 9.1.0 Security Update

2026-10-01

WHMCS CVE-2026-16272

2026-09-09 00:00:00

PayTR Module for WHMCS CVE-2026-16025: Input Data Manipulation

2026-09-08 00:00:00

System auf Schwachstellen prüfen

Wählen Sie Ihr Produkt und Betriebssystem, um die passenden Fix-Befehle zu sehen.

System prüfen