Medium · 4.8 CVE-2023-52046 EUVD-2023-56725GHSA-mw6w-j49q-q324

Cross Site Scripting vulnerability (XSS) in webmin v.2.105 and earlier allows a remote attacker to execute arbitrary code via a crafted pay…

Published Jan 25, 2024 · Updated May 30, 2025 · Assigned by mitre

Description

Cross Site Scripting vulnerability (XSS) in webmin v.2.105 and earlier allows a remote attacker to execute arbitrary code via a crafted payload to the "Execute cron job as" tab Input field.

Advisories 1

WID-SEC-2024-0221 Webmin: Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · Jan 25, 2024

References

https://github.com/Acklee/webadmin_xss/blob/main/xss.md