CVE-2023-3479

MediumCVSS 6.1

Published: 30/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.28%

66th percentile - higher than 66% of all known CVEs

Summary

A Cross-site Scripting (XSS) vulnerability is reflected in the GitHub repository hestiacp/hestiacp prior to version 1.7.8. An attacker could exploit this flaw to inject malicious scripts.

Risk Assessment

This vulnerability could lead to user data theft or session hijacking. Organizations should be aware of the risks associated with this flaw being exploited by malicious actors.

Recommendation

It is recommended to upgrade to version 1.7.8 or later to mitigate this vulnerability. Additionally, conducting a security audit of the application is advisable.

Original NVD description (English source)

Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.7.8.