Description
Multiple cross-site scripting (XSS) vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows.
References
- http://www.webmin.com/changes.html
- 58917 third-party-advisory
- 58919 third-party-advisory
- 67649 vdb-entry
- http://www.webmin.com/uchanges.html
- 1030296 vdb-entry
- 1030297 vdb-entry
- 67647 vdb-entry