An issue exists in Webmin 2.021. A Reflected Cross-Site Scripting (XSS) vulnerability exists in the package search functionality. The vulnerability allows an malicious user to inject a malicious payload in the "Search for Package" field, which gets reflected back in the application's response, leading to the execution of arbitrary JavaScript code within the context of the victim's browser.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
webmin webmin 2.021 |
Vulmon