All vulnerabilities

Servers and applications

GHSA-4h7f-52rq-75mj

Reflected XSS via unescaped array keys in debug_panel.php (incomplete fix of #5550)

Severity
Medium 6.1
Published
8 Nov 2026
Last changed
8 Nov 2026
Added to UpHeron
8 Nov 2026
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
Hestia Control PanelServers and applications · github:hestiacp/hestiacp
  • From 1.9.8 up to 1.10.5

References