CVE-2023-38304
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
A Stored Cross-Site Scripting (XSS) vulnerability was discovered in Webmin 2.021 in the Users and Groups functionality, allowing an attacker to store a malicious payload in the Group Name field when creating a new group.
Risk Assessment
This vulnerability could lead to the execution of malicious code in users' browsers, posing a risk of data theft or session hijacking.
Recommendation
It is recommended to update Webmin to the latest version to mitigate this vulnerability and to review and validate user input data.
Original NVD description (English source)
An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users and Groups functionality, allowing an attacker to store a malicious payload in the Group Name field when creating a new group.