Unscored CVE-2023-40982 EUVD-2023-45521GHSA-rg8w-h73p-9cjx

A stored cross-site scripting (XSS) vulnerability in Webmin v2.100 allows attackers to execute arbitrary web scripts or HTML via a crafted …

Published Sep 15, 2023 · Updated Jul 9, 2026 · Assigned by mitre

Description

A stored cross-site scripting (XSS) vulnerability in Webmin v2.100 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cloned module name parameter.

Advisories 1

WID-SEC-2023-1925 Webmin: Mehrere Schwachstellen ermöglichen Cross-Site Scripting BSI CERT-Bund (WID) · Sep 14, 2023

References

https://github.com/Vi39/Webmin-2.100/blob/main/CVE-2023-40982