Unscored CVE-2023-38307 EUVD-2023-42126GHSA-592m-2x2v-cwg6

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users and Groups functiona…

Published Jul 31, 2023 · Updated Oct 22, 2024 · Assigned by mitre

Description

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users and Groups functionality. The vulnerability occurs when an authenticated user adds a new user and inserts an XSS payload into the user's real name.

Advisories 1

WID-SEC-2023-1925 Webmin: Mehrere Schwachstellen ermöglichen Cross-Site Scripting BSI CERT-Bund (WID) · Sep 14, 2023

References

https://webmin.com/tags/webmin-changelog/
https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38307