PT-2025-34485 · Unknown · Easy Hosting Control Panel

CVE-2025-50858

·

Published

2025-08-22

·

Updated

2025-09-24

CVSS v2.0

6.4

Medium

VectorAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions: Easy Hosting Control Panel (EHCP) version 20.04.1.b
Description: The List MySQL Databases function in Easy Hosting Control Panel (EHCP) is susceptible to a reflected cross-site scripting issue. Authenticated attackers can potentially execute arbitrary JavaScript code through the action parameter.
Recommendations: Update to a newer version of Easy Hosting Control Panel (EHCP) that addresses this issue. As a temporary workaround, sanitize the action parameter to prevent the injection of malicious scripts.

Exploit

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2026-13687
CVE-2025-50858

Affected Products

Easy Hosting Control Panel