CVE-2022-36304

Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the generate_response function at /web/api/v1/upload/UploadHandler.php

published July 19, 2022

CVSS
—
EPSS
1%
Percentile
43.8
In the wild
Unconfirmed
What it is

Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the generate_response function at /web/api/v1/upload/UploadHandler.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00528 · 43.8th percentile
Published
2022-07-19T18:20Z
EPSS history
Timeline
  • 19 JUL 18:20Z
    Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the generate_response function at /web/api/v1/upload/UploadHandler.php
    cvelistv5