CVE-2025-52206
ISPConfig 3.3.0 is vulnerable to Cross Site Scripting (XSS) via the system status webpage.
Published May 5, 2026 · updated Oct 15, 2026 · ispconfig ispconfig
ISPConfig 3.3.0 is vulnerable to Cross Site Scripting (XSS) via the system status webpage.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
May 5, 2026 · NIST NVD
Detected
ISPConfig 3.3.0 is vulnerable to Cross Site Scripting (XSS) via the system status webpage.
Oct 15, 2026 · NIST NVD
Updated
ISPConfig 3.3.0 is vulnerable to Cross Site Scripting (XSS) via the system status webpage.
Affected
- cpe ispconfig/ispconfig3.3.0
Sources
- CVE.orgVulnerability recordCVE-2025-52206
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2025-52206
ISPConfig 3.3.0 is vulnerable to Cross Site Scripting (XSS) via the system status webpage.
nvd.nist.gov