2026-01-21 17:27:48
VulnCheck
PUBLISHED
VestaCP versions prior to 0.9.8-25 contain a cross-site scripting vulnerability in the IP interface configuration that allows attackers to inject malicious scripts. Attackers can exploit the v_interface parameter by sending a crafted POST request to the add/ip/ endpoint with a stored XSS payload.