Unscored CVE-2023-40984 EUVD-2023-45523GHSA-pg5c-r35w-x68r

A reflected cross-site scripting (XSS) vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious sc…

Published Sep 15, 2023 · Updated Jul 9, 2026 · Assigned by mitre

Description

A reflected cross-site scripting (XSS) vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload into the Replace in Results file.

Advisories 1

WID-SEC-2023-1925 Webmin: Mehrere Schwachstellen ermöglichen Cross-Site Scripting BSI CERT-Bund (WID) · Sep 14, 2023

References

https://github.com/Vi39/Webmin-2.100/blob/main/CVE-2023-40984