medium4.8
CVE-2017-17089
custom/run.cgi in Webmin before 1.870 allows remote authenticated administrators to conduct XSS attacks via the description field in the custom command functio…
Impact
custom/run.cgi in Webmin before 1.870 allows remote authenticated administrators to conduct XSS attacks via the description field in the custom command functionality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webmin | Webmin | through 1.860 |