CVE-2023-40983

41th percentile - higher than 41% of all known CVEs

A reflected cross-site scripting (XSS) vulnerability exists in the File Manager function of Webmin v2.100. It allows attackers to execute malicious scripts by injecting a crafted payload into the 'Find in Results' file.

An attacker can exploit this vulnerability to steal user sessions, redirect to malicious sites, or perform other actions in the victim's browser context, compromising data confidentiality and integrity.

Immediately update Webmin to the latest available version that fixes this vulnerability. Until the update is applied, restrict access to the administrative interface and avoid using the file search functionality.