medium5.4
CVE-2023-38311
An issue was discovered in Webmin 2.021.
Impact
An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the System Logs Viewer functionality. The vulnerability allows an attacker to store a malicious payload in the configuration field, triggering the execution of the payload when saving the configuration or when accessing the System Logs Viewer page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webmin | Webmin | Version 2.021 |