A cross-site scripting (XSS) vulnerability in /admin/list_key.html of HestiaCP before v1.3.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-30071.json"