Vulnerabilities > Hestiacp > Control Panel

DATE CVE VULNERABILITY TITLE RISK
2023-10-29 CVE-2023-5839 Privilege Chaining vulnerability in Hestiacp Control Panel
Privilege Chaining in GitHub repository hestiacp/hestiacp prior to 1.8.9.
local
low complexity
hestiacp CWE-268
7.8
2023-06-30 CVE-2023-3479 Cross-site Scripting vulnerability in Hestiacp Control Panel
Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.7.8.
network
low complexity
hestiacp CWE-79
6.1
2022-08-18 CVE-2021-30071 Cross-site Scripting vulnerability in Hestiacp Control Panel
A cross-site scripting (XSS) vulnerability in /admin/list_key.html of HestiaCP before v1.3.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
network
low complexity
hestiacp CWE-79
6.1
2022-08-05 CVE-2022-2636 Code Injection vulnerability in Hestiacp Control Panel
Improper Control of Generation of Code ('Code Injection') in GitHub repository hestiacp/hestiacp prior to 1.6.6.
network
low complexity
hestiacp CWE-94
8.8
2022-04-28 CVE-2022-1509 Command Injection vulnerability in Hestiacp Control Panel
Command Injection Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.12.
network
low complexity
hestiacp CWE-77
8.8
2022-03-16 CVE-2022-0986 Cross-site Scripting vulnerability in Hestiacp Control Panel
Reflected Cross-site Scripting (XSS) Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.11.
network
hestiacp CWE-79
4.3
2022-03-04 CVE-2022-0752 Cross-site Scripting vulnerability in Hestiacp Control Panel
Cross-site Scripting (XSS) - Generic in GitHub repository hestiacp/hestiacp prior to 1.5.9.
network
hestiacp CWE-79
4.3
2022-03-04 CVE-2022-0838 Cross-site Scripting vulnerability in Hestiacp Control Panel
Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.5.10.
network
hestiacp CWE-79
4.3
2022-03-03 CVE-2022-0753 Cross-site Scripting vulnerability in Hestiacp Control Panel
Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.5.9.
network
hestiacp CWE-79
4.3
2021-09-15 CVE-2021-3797 Unspecified vulnerability in Hestiacp Control Panel
hestiacp is vulnerable to Use of Wrong Operator in String Comparison
network
low complexity
hestiacp
7.5