CVE-2022-36303: XSS
First published: Tue Jul 19 2022(Updated: )
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Vestacp Vesta Control Panel | =1.0.0-5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-36303?
CVE-2022-36303 is a cross-site scripting (XSS) vulnerability found in Vesta v1.0.0-5.
What is the severity of CVE-2022-36303?
The severity of CVE-2022-36303 is rated as medium with a CVSS score of 6.1.
How does CVE-2022-36303 affect Vesta Control Panel?
CVE-2022-36303 affects Vesta Control Panel version 1.0.0-5.
How can CVE-2022-36303 be exploited?
CVE-2022-36303 can be exploited through the handle_file_upload function at /web/api/v1/upload/UploadHandler.php in Vesta v1.0.0-5.
Is there a patch available for CVE-2022-36303?
There is currently no patch available for CVE-2022-36303. It is recommended to follow the official GitHub repository for updates.
- collector/nvd-index
- vendor/vestacp
- canonical/vestacp vesta control panel
- version/vestacp vesta control panel/1.0.0-5