CVE-2022-36304

Vesta v1.0.0-5 was discovered to contain a cross-site scripting XSS vulnerability via the generateresponse function at /web/api/v1/upload/UploadHandler.php...

CVE-2022-36304

CVE-2022-36304 affects Vesta Control Panel (VestaCP) v1.0.0-5. The issue is a cross-site scripting (XSS) flaw in the generate_response function at /web/api/v1/upload/UploadHandler.php. Exploitation requires user interaction; successful payloads could impact confidentiality and integrity (both rat...