CVE-2017-17089

No fix known EPSS <1%

custom/run.cgi in Webmin before 1.870 allows remote authenticated administrators to conduct XSS attacks via the description field in the custom command functionality.

Published 2017-12-30 · CVE record · OSV

Products: webmin