Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to dodelautores.html or (2) handle parameter to addhandle.html.Referenceshttp://www.osvdb.org/4530http://marc.info/?l=bugtraq&m=108006627005371&w=2http://securitytracker.com/id?1009541http://www.securityfocus.com/bid/9965http://www.osvdb.org/4529https://exchange.xforce.ibmcloud.com/vulnerabilities/15517
