CVE-2023-3479 MEDIUM

CVE-2023-3479: Cross-site Scripting (XSS) - Reflected in hestiacp/hestiacp

Vendor Hestiacp
Product hestiacp/hestiacp
Weakness CWE-79 · XSS
Published June 30, 2023
Last update November 6, 2024
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.7.8.

Key dates

02Disclosure timeline

June 30, 2023 CVE published
November 6, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-24879 WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Scripting (XSS) CVE-2024-44054 WordPress Fluida theme <= 1.8.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-48209 Reflected XSS in authenticated agent context CVE-2025-34307 IPFire < v2.29 Stored XSS via Default Country Search CVE-2026-9134 Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel <= 3.1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_attribute_key' Shortcode Parameter