CVE-2022-0838 MEDIUM

CVE-2022-0838: Cross-site Scripting (XSS) - Reflected in hestiacp/hestiacp

Vendor Hestiacp
Product hestiacp/hestiacp
Weakness CWE-79 · XSS
Published March 4, 2022
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

6.6/10
Attack vector Network
Attack complexity High
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.5.10.

Key dates

02Disclosure timeline

March 4, 2022 CVE published
August 2, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-27233 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2024-12393 Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2024-003 CVE-2024-38221 Microsoft Edge (Chromium-based) Spoofing Vulnerability CVE-2025-10503 Reflected Cross-Site Scripting via Authentication Endpoint in WSO2 Identity Server CVE-2024-5419 Void Contact Form 7 Widget For Elementor Page Builder <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via cf7_redirect_page Attribute