CVE-2022-36304: Improper Neutralization of Input During Web Page Generation

Vesta v1.0.0-5 was discovered to contain a cross-site scripting XSS vulnerability via the generateresponse function at /web/api/v1/upload/UploadHandler.php...