Mesh3l911/CVE-2021-32160

Mesh3l911/CVE-2021-32160

Releases0
Exploiting a Reflected Cross-Site Scripting (XSS) attack to create a privileged user through the Webmin's add users feature then getting a reverse shell through the Webmin's running process feature

CVE History

CVEPublishedCVSS v3CVSS v2
6.1 MEDIUM4.3 MEDIUM

A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 through the Add Users feature.