Improper Control of Generation of Code ('Code Injection') in GitHub repository hestiacp/hestiacp before 1.6.6.
hestiacp control panel