Description
The Parallels Plesk Panel software package is a commercial web hosting automation program. Parallels Plesk Single Sign-On (SSO) technology make it easy for customers to use and manage applications, and reduce the administrative costs of password management for hosting providers. Parallels Plesk Single Sign-On (SSO) implementation was found vulnerable to XXE (XML External Entity) and XSS (Cross-site scripting) vulnerabilities.
Remediation
To disable SSO-mode in Parallels Plesk Panel:
~# /usr/local/psa/bin/sso --disable
References
Related Vulnerabilities
WordPress Plugin Google Maps v3 Shortcode Cross-Site Scripting (1.2.1)
WordPress Plugin Image Slider Cross-Site Scripting (1.1.5)
WordPress Plugin Konnichiwa! Membership Cross-Site Scripting (0.8.3)
WordPress Plugin Social Buttons Pack by BestWebSoft Cross-Site Scripting (1.1.0)
WordPress Plugin Google Analytics Opt-Out Cross-Site Scripting (2.3.4)