CVE-2026-93697 is a stored XSS vulnerability in the WHM Mass Modify Accounts interface. This flaw allows an attacker with low privileges to inject malicious scripts that execute arbitrary code, potentially compromising the confidentiality, integrity, and availability of the system. The vulnerability is confirmed as published with a CVSS 3.0 score of 9.0, indicating critical severity. No vendor advisory or patch information is available at this time.

Successful exploitation can lead to arbitrary code execution within the context of the affected WHM interface, resulting in full compromise of confidentiality, integrity, and availability of the affected system. This could allow attackers to perform unauthorized actions or escalate privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the WHM Mass Modify Accounts interface to trusted users only and monitor for suspicious activity related to this interface.