CVE-2023-4517 LOW

CVE-2023-4517: Cross-site Scripting (XSS) - Stored in hestiacp/hestiacp

Vendor Hestiacp
Product hestiacp/hestiacp
Weakness CWE-79 · XSS
Published October 13, 2023
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

3.2/10
Attack vector Adjacent
Attack complexity Low
Privileges required High
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

Cross-site Scripting (XSS) - Stored in GitHub repository hestiacp/hestiacp prior to 1.8.6.

Key dates

02Disclosure timeline

October 13, 2023 CVE published
September 17, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-28621 WordPress Raise Mag Theme <= 1.0.7 and Wishful Blog theme <= 2.0.1 are vulnerable to Cross Site Scripting (XSS) CVE-2024-13017 PHPGurukul Maid Hiring Management System About Us Page aboutus.php cross site scripting CVE-2026-40282 WeGIA has stored XSS in intercorrencia_visualizar.php CVE-2025-58655 WordPress Category Featured Images Plugin <= 1.1.8 - Cross Site Scripting (XSS) Vulnerability CVE-2024-56274 WordPress Astra Widgets plugin <= 1.2.15 - Cross Site Scripting (XSS) vulnerability