CVE-2026-124552

Webmin versions through 2.670 are vulnerable to a stored cross-site scripting (XSS) flaw within the Shorewall and Shorewall6 modules. The vulnerability exists because the list.cgi component fails to escape table fields and COMMENT lines. An authenticated user with table edit permissions can injec...

EUVD-2026-119608

Webmin through 2.670 contains a stored cross-site scripting vulnerability in the Shorewall and Shorewall6 modules' list.cgi, which renders table fields and COMMENT lines unescaped. Authenticated users with table edit permission can store JavaScript via savecmt.cgi or table entries that executes...

CVE-2026-124552 Webmin through 2.670 Stored XSS via Shorewall and Shorewall6 list.cgi

Webmin through 2.670 contains a stored cross-site scripting vulnerability in the Shorewall and Shorewall6 modules' list.cgi, which renders table fields and COMMENT lines unescaped. Authenticated users with table edit permission can store JavaScript via savecmt.cgi or table entries that executes...

PT-2026-140012

Webmin through 2.670 contains a stored cross-site scripting vulnerability in the Shorewall and Shorewall6 modules' list.cgi, which renders table fields and COMMENT lines unescaped. Authenticated users with table edit permission can store JavaScript via savecmt.cgi or table entries that executes...

CVE-2026-124552: webmin: Webmin through 2.670 contains a stored cross-site scripting vulnerability in the Shorewall and Shorewall6 modules'…

Webmin through 2.670 contains a stored cross-site scripting vulnerability in the Shorewall and Shorewall6 modules' list.cgi, which renders table fields and COMMENT lines unescaped. Authenticated users with table edit permission can store JavaScript via savecmt.cgi or table entries that executes...