CVE-2025-50859

Name of the Vulnerable Software and Affected Versions Easy Hosting Control Panel (EHCP) version 20.04.1.b

Description A reflected Cross-Site Scripting issue exists in the Change Template function. Authenticated attackers can execute arbitrary JavaScript code through the template parameter. The issue involves the potential for malicious code injection via a crafted request to the application. The API endpoint involved is the Change Template function. The vulnerable parameter is template.

Recommendations Update to a newer version of Easy Hosting Control Panel that addresses this issue. As a temporary workaround, consider restricting access to the Change Template function until a patch is available.