CVE-2022-36303

Vesta v1.0.0-5 was discovered to contain a cross-site scripting XSS vulnerability via the handlefileupload function at /web/api/v1/upload/UploadHandler.php...

CVE-2022-36303

Vesta, version 1.0.0-5, contains a cross-site scripting (XSS) vulnerability in the handle_file_upload function of /web/api/v1/upload/UploadHandler.php. Root cause: unsafely handling uploaded content enables script execution. Impact, per CVE metrics, is limited to confidentiality and integrity wit...