CVE-2023-38307

Published: 2023-07-31T15:15Z

Last Modified: 2024-11-21T08:13Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users and Groups functionality. The vulnerability occurs when an authenticated user adds a new user and inserts an XSS payload into the user's real name. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt