| Package | Affected versions | Patched versions |
|---|---|---|
| myvesta | ≤ 0.9.8-26-39 | |
| vesta control panel | ≤ 0.9.8-27 |
web/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39 allows uploads from a different origin.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free