CVE-2023-47099: XSS
Published Oct 31, 2023
·Updated
A Stored Cross-Site Scripting (XSS) vulnerability in the Create Virtual Server in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via Description field while creating the Virtual server.
Affected Software
1 affected component
Virtualmin Virtualmin=7.7
Event History
Oct 31, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Nov 1, 2023
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-47099?
The severity of CVE-2023-47099 is medium with a CVSS score of 5.4.
2
How can remote attackers exploit CVE-2023-47099?
Remote attackers can exploit CVE-2023-47099 by injecting arbitrary web script or HTML via the Description field while creating a Virtual server in Virtualmin 7.7.
3
What software version is affected by CVE-2023-47099?
CVE-2023-47099 affects Virtualmin 7.7.
4
Is there a fix for CVE-2023-47099?
Yes, there is a fix available for CVE-2023-47099. Please refer to the provided reference for more information.
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2023-47099?
The Common Weakness Enumeration (CWE) ID for CVE-2023-47099 is 79.