Skip to content

Vestacp vulnerabilities

Products

Newest

vestacp VestaCP 0.9.8-26 - 'LoginAs' Insufficient Session Validation CVE-2020-36948 8.7 HighJanuary 27, 2026
vestacp VestaCP < 0.9.8-25 - Stored Cross-Site Scripting CVE-2021-47873 5.1 MediumJanuary 21, 2026
unspecified vesta control panel, vestacp control panel +1 more Vesta Control Panel sed main.sh argument injection CVE-2022-3967 5.3 MediumNovember 13, 2022
vestacp control panel, vesta control panel +1 more myVesta Control Panel before 0.9.8-26-43 and Vesta Control Panel before 0.9.8-26 are vulnerable... CVE-2021-46850 7.2 HighOctober 24, 2022
vestacp vesta control panel Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the body... CVE-2022-36305 6.1 MediumJuly 19, 2022
vestacp vesta control panel Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the... CVE-2022-36304 6.1 MediumJuly 19, 2022
vestacp vesta control panel Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the... CVE-2022-36303 6.1 MediumJuly 19, 2022
vestacp vesta control panel Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the post... CVE-2022-34025 6.1 MediumJuly 19, 2022
vestacp vesta control panel vesta 0.9.8-24 is affected by a file inclusion vulnerability in file web/add/user/index.php. CVE-2021-43693 9.8 CriticalNovember 29, 2021
vestacp vesta control panel VestaCP through 0.9.8-24 allows the admin user to escalate privileges to root because the Sudo... CVE-2021-30462 7.2 HighApril 8, 2021
vestacp control panel VestaCP through 0.9.8-24 allows attackers to gain privileges by creating symlinks to files for... CVE-2021-30463 7.8 HighApril 8, 2021
myvestacp myvesta, vestacp vesta control panel +1 more web/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta... CVE-2021-28379 Public exploit 8.8 HighMarch 15, 2021
vestacp vesta control panel An elevation of privilege in Vesta Control Panel through 0.9.8-26 allows an attacker to gain root... CVE-2020-10787 8.8 HighApril 21, 2020
vestacp vesta control panel A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user... CVE-2020-10786 8.8 HighApril 21, 2020
hestiacp control panel In the Password Reset Module in VESTA Control Panel through 0.9.8-25 and Hestia Control Panel... CVE-2020-10966 6.5 MediumMarch 25, 2020
vestacp vesta control panel Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup... CVE-2020-10808 Public exploit EPSS 77.5% 8.8 HighMarch 22, 2020
vestacp vesta control panel Vesta Control Panel (VestaCP) 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command... CVE-2019-9859 8.8 HighMarch 10, 2020
vestacp control panel A command injection vulnerability in UploadHandler.php in Vesta Control Panel 0.9.8-24 allows... CVE-2019-12792 8.8 HighAugust 15, 2019
vestacp control panel A directory traversal vulnerability in the v-list-user script in Vesta Control Panel 0.9.8-24... CVE-2019-12791 8.8 HighAugust 15, 2019
vestacp control panel Vesta Control Panel 0.9.8-23 allows XSS via a crafted URL. CVE-2019-9841 6.1 MediumApril 19, 2019
vestacp vesta control panel Vesta CP version Prior to commit f6f6f9cfbbf2979e301956d1c6ab5c44386822c0 -- any release prior to... CVE-2018-1000884 9.8 CriticalDecember 20, 2018
vestacp control panel Vesta Control Panel through 0.9.8-22 has XSS via the edit/web/ domain parameter, the list/backup/... CVE-2018-18547 6.1 MediumOctober 24, 2018
vestacp control panel An issue was discovered in Vesta Control Panel 0.9.8-20. There is Reflected XSS via $_REQUEST[... CVE-2018-10686 6.1 MediumMay 6, 2018
vestacp control panel Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary... CVE-2015-4117 Public exploit EPSS 10.6% 8.8 HighFebruary 28, 2018
vestacp vesta control panel Cross-site request forgery (CSRF) vulnerability in Vesta Control Panel before 0.9.8-14 allows... CVE-2015-2861 6.8 MediumJune 18, 2015