CVE-2023-38304: XSS
An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users and Groups functionality, allowing an attacker to store a malicious payload in the Group Name field when creating a new group.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-38304?
CVE-2023-38304 is a Stored Cross-Site Scripting (XSS) vulnerability in Webmin 2.021.
How severe is CVE-2023-38304?
CVE-2023-38304 has a severity level of 5.4, which is considered medium.
What software is affected by CVE-2023-38304?
Webmin 2.021 is affected by CVE-2023-38304.
How can an attacker exploit CVE-2023-38304?
An attacker can exploit CVE-2023-38304 by storing a malicious payload in the Group Name field when creating a new group in the Users and Groups functionality of Webmin 2.021.
Are there any references related to CVE-2023-38304?
Yes, you can find more information about CVE-2023-38304 at the following links: [GitHub](https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38304) and [Webmin Changelog](https://webmin.com/tags/webmin-changelog/).