← back
CVE-2023-38307

CVE-2023-38307

EPSS 0.4%
An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users and Groups functionality. The vulnerability occurs when an authenticated user adds a new user and inserts an XSS payload into the user's real name.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38307https://webmin.com/tags/webmin-changelog/