CVE-2023-38303

No fix known EPSS <1%

An issue was discovered in Webmin 2.021. One can exploit a stored Cross-Site Scripting (XSS) attack to achieve Remote Command Execution (RCE) through the Users and Group's real name parameter.

Published 2023-07-31 · CVE record · OSV

Products: webmin