Mesh3l911/CVE-2021-32157

Mesh3l911/CVE-2021-32157

Releases0
Exploiting a Reflected Cross-Site Scripting (XSS) attack to get a Remote Command Execution (RCE) through the Webmin's Scheduled Cron Jobs feature

CVE History

CVEPublishedCVSS v3CVSS v2
9.6 CRITICAL6.8 MEDIUM

A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature.