2 matches found
CVE-2022-36304: Improper Neutralization of Input During Web Page Generation
Vesta v1.0.0-5 was discovered to contain a cross-site scripting XSS vulnerability via the generateresponse function at /web/api/v1/upload/UploadHandler.php...
6.1CVSS6.2AI score0.00513EPSS
SaveExploits1References2
CVE-2022-34025: Improper Neutralization of Input During Web Page Generation
Vesta v1.0.0-5 was discovered to contain a cross-site scripting XSS vulnerability via the post function at /web/api/v1/upload/UploadHandler.php...
6.1CVSS6.2AI score0.00513EPSS
SaveExploits1References2
20