← All advisories

Medium severity6.1NVD Advisory· Published Mar 4, 2022· Updated Jun 17, 2026

CVE-2022-0838

CVE-2022-0838

Description

Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.5.10.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Hestiacp/Control Panel
cpe:2.3:a:hestiacp:control_panel:*:*:*:*:*:*:*:*
Range: <1.5.10
Hestiacp/Hestiacpllm-fuzzy2 versions
<1.5.10+ 1 more
- (no CPE)range: <1.5.10
- (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

2

github.com/hestiacp/hestiacp/commit/640f822d306ffb3eddf8ce2f46de75d7344283c1nvdPatchThird Party Advisory
huntr.dev/bounties/bd2fb1f1-cc8b-4ef7-8e2b-4ca686d8d614nvdExploitPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.