Back to Security Advisories

Security Advisory: WHMCS Stored XSS

A stored cross-site scripting (XSS) vulnerability was found in the WHMCS admin panel, allowing an authenticated user to inject malicious scripts.

Medium
WHMCS

Affected Versions

8.7.0 and earlier

Patched Version

8.7.1

Default Update CMD

yum update -y

Fix Commands

Any supported OS

cd /var/www/html
php composer.phar update whmcs/core

A stored cross-site scripting (XSS) vulnerability was found in the WHMCS admin panel, allowing an authenticated user to inject malicious scripts.

References

Security Advisories

Related Advisories

WHMCS 8.13.7 Security Update

2026-09-08

WHMCS 8.13.6 Security Update

2026-09-08

WHMCS 8.13.5 Security Update

2026-09-08

Check your system for vulnerabilities

Выберите продукт и операционную систему, чтобы увидеть точные команды исправления.

Check Your System