Unscored CVE-2023-43309 EUVD-2023-47728GHSA-hhqv-xv6j-vjp6

There is a stored cross-site scripting (XSS) vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows…

Published Sep 21, 2023 · Updated Sep 24, 2024 · Assigned by mitre

Description

There is a stored cross-site scripting (XSS) vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows attackers to run malicious scripts by injecting a specially crafted payload.

Advisories 1

WID-SEC-2023-2209 Webmin: Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · Sep 21, 2023

References

https://github.com/TishaManandhar/Webmin_xss_POC/blob/main/XSS