This vulnerability (CVE-2026-93029) is a stored cross-site scripting (CWE-79) issue in the Webpros cPanel product, specifically within the WHM Manage SSL Hosts interface. It allows an attacker with low privileges to inject and execute arbitrary code in the context of the affected application. The CVSS v3.0 score is 9.0, indicating critical severity with network attack vector, low attack complexity, requiring privileges, user interaction, and resulting in complete confidentiality, integrity, and availability impact. Multiple versions of cPanel prior to 11.138.0.11, 11.136.0.45, 11.134.0.61, 11.110.0.148, and 11.138.1.13 are affected.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code within the cPanel environment, potentially leading to full compromise of confidentiality, integrity, and availability of the system. This can result in unauthorized access, data theft, or disruption of services.

No explicit patch links or vendor advisory content are provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is confirmed, restrict access to the WHM Manage SSL Hosts interface to trusted administrators only and monitor for suspicious activity.