CVE-2025-30008中 5.4HestiaCP before 1.9.5 contains a stored cross-site scripting vulnerability that allows authenticated low-privilege users to inject arbitrary…
CVE-2025-30007高 8.8HestiaCP before 1.9.5 contains an authenticated OS command injection vulnerability that allows low-privilege authenticated users to execute …
CVE-2023-5839高 7.8Privilege Chaining in GitHub repository hestiacp/hestiacp prior to 1.8.9.
CVE-2021-30071中 6.1A cross-site scripting (XSS) vulnerability in /admin/list_key.html of HestiaCP before v1.3.5 allows attackers to execute arbitrary web scrip…
CVE-2022-2636高 8.8Improper Control of Generation of Code ('Code Injection') in GitHub repository hestiacp/hestiacp prior to 1.6.6.