Home

Description

Reflected Cross-Site Scripting in the Change Template function in Easy Hosting Control Panel (EHCP) 20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via the template parameter.

PUBLISHED Reserved 2025-06-16 | Published 2025-08-22 | Updated 2025-08-26 | Assigner mitre

References

www.ehcp.net/?p=402

packetstorm.news/files/id/208533

cve.org (CVE-2025-50859)

nvd.nist.gov (CVE-2025-50859)

Download JSON