CVE-2025-30008 | HestiaCP up to 1.9.4 DNS Record Rendering list_dns_rec.php htmlspecialchars Value cross site scripting

July 10, 2026 Yanac

A vulnerability categorized as problematic has been discovered in HestiaCP up to 1.9.4. Affected is the function htmlspecialchars of the file list_dns_rec.php of the component DNS Record Rendering. The manipulation of the argument Value results in cross site scripting.

This vulnerability is cataloged as CVE-2025-30008. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More