Cross site scripting

2022-07-1919:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

34.0%

JSON

Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the handle_file_upload function at /web/api/v1/upload/UploadHandler.php.

CPENameOperatorVersion
vesta_control_paneleq1.0.0-5

CPE	Name	Operator	Version
	vesta_control_panel	eq	1.0.0-5

References

github.com/serghey-rodin/vesta/issues/2252

0.001 Low

EPSS

Percentile

34.0%

JSON

Related for PRION:CVE-2022-36303