CVE-2020-8820: XSS
An XSS Vulnerability exists in Webmin 1.941 and earlier affecting the Cluster Shell Commands Endpoint. A user may enter any XSS Payload into the Command field and execute it. Then, after revisiting the Cluster Shell Commands Menu, the XSS Payload will be rendered and executed.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-8820?
CVE-2020-8820 is an XSS vulnerability that exists in Webmin 1.941 and earlier versions, specifically affecting the Cluster Shell Commands Endpoint.
How does CVE-2020-8820 impact Webmin?
CVE-2020-8820 allows a user to enter an XSS payload into the Command field and execute it, resulting in the payload being rendered and executed when revisiting the Cluster Shell Commands Menu.
What is the severity of CVE-2020-8820?
CVE-2020-8820 has a severity of medium with a CVSS v3 base score of 5.4.
How do I fix the XSS vulnerability in Webmin?
To fix the XSS vulnerability in Webmin, you should upgrade to version 1.941 or later, as it contains the necessary security patches.
What is CWE-79?
CWE-79 is a category of software weaknesses that includes cross-site scripting (XSS) vulnerabilities.