Skip to content
OpenAdvisories

Vendor

hestiacp

20 known vulnerabilities.

Products

hestiacp/hestiacp 13 hestiacp 7
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.6
    CVE-2025-30008

    HestiaCP < 1.9.5 Stored XSS via DNS Record Management Interface

    HestiaCP before 1.9.5 contains a stored cross-site scripting vulnerability that allows authenticated low-privilege users to inject arbitrary HTML by creating a DNS record with a double-quote followed by a script payload in the value field. The application fai…

    hestiacp hestiacp
  • Medium 4.3
    CVE-2023-3479 Scanner template

    Cross-site Scripting (XSS) - Reflected in hestiacp/hestiacp

    Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.7.8.

    hestiacp hestiacp/hestiacp
  • Medium 6.6
    CVE-2022-0838

    Cross-site Scripting (XSS) - Reflected in hestiacp/hestiacp

    Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.5.10.

    hestiacp hestiacp/hestiacp
  • Medium 4.8
    CVE-2021-3797

    Use of Wrong Operator in String Comparison in hestiacp/hestiacp

    hestiacp is vulnerable to Use of Wrong Operator in String Comparison

    hestiacp hestiacp/hestiacp