CVE-2023-38307

Description

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users and Groups functionality. The vulnerability occurs when an authenticated user adds a new user and inserts an XSS payload into the user's real name.

Reserved 2023-07-14 | Published 2023-07-31 | Updated 2024-10-22 | Assigner mitre

References

webmin.com/tags/webmin-changelog/

github.com/...harma786/Webmin-2.021/blob/main/CVE-2023-38307

cve.org (CVE-2023-38307)

nvd.nist.gov (CVE-2023-38307)

Download JSON