Skip to content
OpenAdvisories

Vendor

Webmin

24 known vulnerabilities.

Products

Webmin 19 Usermin 4 webmin/webmin 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2026-124552 Public exploit

    Webmin through 2.670 Stored XSS via Shorewall and Shorewall6 list.cgi

    Webmin through 2.670 contains a stored cross-site scripting vulnerability in the Shorewall and Shorewall6 modules' list.cgi, which renders table fields and COMMENT lines unescaped. Authenticated users with table edit permission can store JavaScript via savecm…

    Webmin Webmin