CVE-2022-34025

Vesta v1.0.0-5 was discovered to contain a cross-site scripting XSS vulnerability via the post function at /web/api/v1/upload/UploadHandler.php...

CVE-2022-34025

creationtimestamp| type| source ---|---|--- 2022-07-19 22:41:00+00:00| seen| https://t.me/cibsecurity/46582...

CVE-2022-34025

CVE-2022-34025 affects Vesta Control Panel (VestaCP) v1.0.0-5. The vulnerability is a cross-site scripting (XSS) in the POST path /web/api/v1/upload/UploadHandler.php (upload function). Root cause described as an XSS in the upload handler; impact indicators from NVD show Confidentiality: Low, Int...