← All advisories

Medium severity6.1OSV Advisory· Published Apr 19, 2019· Updated Jun 17, 2026

CVE-2019-9841

CVE-2019-9841

Description

Vesta Control Panel 0.9.8-23 allows XSS via a crafted URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Outroll/VestaOSV
Range: 0.9.8-10, 0.9.8-11, 0.9.8-12, …
Vestacp/Control Panel
cpe:2.3:a:vestacp:control_panel:0.9.8-23:*:*:*:*:*:*:*
Vesta Control Panel/Vesta Control Panelllm-fuzzy
Range: = 0.9.8-23
Vestacp/VestaCPllm-fuzzy
Range: = 0.9.8-23

Patches

Vulnerability mechanics

References

3

github.com/serghey-rodin/vesta/commit/c28c5d29a3c61bc8110c11349e3f2309cd537cfanvdPatchThird Party Advisory
cardaci.xyz/advisories/2019/04/15/vesta-control-panel-0.9.8-23-reflected-xss-in-file-manager-api/nvdExploitThird Party Advisory
forum.vestacp.com/viewtopic.phpnvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.