CVE-2023-43309
MEDIUM 4.8EPSS 0.5%
There is a stored cross-site scripting (XSS) vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows attackers to run malicious scripts by injecting a specially crafted payload.
- CVSS v3.1 NVD
- 4.8 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N - EPSS
- 0.46% chance of exploitation in the next 30 days, 38th percentile
- Published
- 2023-09-21
- Updated
- 2024-09-24
Proof-of-concept exploits (1)
- TishaManandhar/Webmin_xss_POC/blob/main/XSS0★ · 2023-09-15