PT-2023-30302

Name of the Vulnerable Software and Affected Versions Virtualmin version 7.7 Description A Stored Cross-Site Scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the Plan name field while editing Account plan details in the Account Plans tab of System Settings. T...

CVE-2023-47095: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability in the Custom fields of Edit Virtual Server under System Customization in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Batch Label field while details of Virtual Server...

Virtualmin Cross-Site Scripting Vulnerability

Virtualmin is a powerful and flexible web hosting control panel for Linux and BSD systems from Virtualmin. A security vulnerability exists in Virtualmin version 7.7 that stems from a cross-site scripting XSS vulnerability in the Create Virtual Server feature...

Virtualmin Cross-Site Scripting Vulnerability

Virtualmin is a powerful and flexible web hosting control panel for Linux and BSD systems from Virtualmin. A security vulnerability exists in Virtualmin version 7.7 that stems from a cross-site scripting XSS vulnerability in the Custom Fields feature...

CVE-2023-47095

CVE-2023-47095 is a stored XSS vulnerability affecting Virtualmin 7.7 in the Custom fields of Edit Virtual Server under System Customization. The issue allows remote attackers to inject arbitrary web script or HTML via the Batch Label field. The available sources describe the affected product and...

PT-2023-30303

Name of the Vulnerable Software and Affected Versions Virtualmin version 7.7 Description A Stored Cross-Site Scripting XSS issue in the Custom fields of Edit Virtual Server under System Customization allows remote attackers to inject arbitrary web script or HTML via the Batch Label field. The...

PT-2023-30307 · Unknown · Virtualmin

Name of the Vulnerable Software and Affected Versions: Virtualmin version 7.7 Description: A Stored Cross-Site Scripting XSS issue in the Create Virtual Server functionality of Virtualmin allows remote attackers to inject arbitrary web script or HTML via the Description field while creating the...

CVE-2023-47099: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability in the Create Virtual Server in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via Description field while creating the Virtual server...

CVE-2023-47096: Improper Neutralization of Input During Web Page Generation

A Reflected Cross-Site Scripting XSS vulnerability in the Cloudmin Services Client under System Setting in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Cloudmin services master field...

PT-2023-30304

Name of the Vulnerable Software and Affected Versions Virtualmin version 7.7 Description A Reflected Cross-Site Scripting XSS issue in the Cloudmin Services Client under System Setting allows remote attackers to inject arbitrary web script or HTML via the Cloudmin services master field. This...

CVE-2023-47099

A Stored Cross-Site Scripting XSS vulnerability in the Create Virtual Server in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via Description field while creating the Virtual server...

PT-2023-30306

Name of the Vulnerable Software and Affected Versions Virtualmin version 7.7 Description A Stored Cross-Site Scripting XSS vulnerability exists in Virtualmin, specifically in the Manage Extra Admins under Administration Options and the Create Extra Administrator tab, allowing remote attackers to...

Virtualmin Cross-Site Scripting Vulnerability

Virtualmin is a powerful and flexible web hosting control panel for Linux and BSD systems from Virtualmin. A security vulnerability exists in Virtualmin version 7.7 that stems from a stored cross-site scripting XSS vulnerability in the Real name or description field...

PT-2023-30305 · Unknown · Virtualmin

Name of the Vulnerable Software and Affected Versions: Virtualmin version 7.7 Description: A Stored Cross-Site Scripting XSS issue in the Server Template under System Setting in Virtualmin allows remote attackers to inject arbitrary web script or HTML via the Template name field while creating...

CVE-2023-47098

CVE-2023-47098 affects Virtualmin 7.7: a Stored Cross-Site Scripting (XSS) vulnerability in the Manage Extra Admins feature under Administration Options, exploitable via the real name or description field. The documentation consistently states the issue as a stored XSS without detailing exploit v...

CVE-2023-47094: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability in the Account Plans tab of System Settings in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Plan name field while editing Account plan details...

CVE-2023-47094

A Stored Cross-Site Scripting XSS vulnerability in the Account Plans tab of System Settings in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Plan name field while editing Account plan details...

CVE-2023-47098: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability in the Manage Extra Admins under Administration Options in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the real name or description field...

CVE-2023-47094

A Stored Cross-Site Scripting XSS vulnerability in the Account Plans tab of System Settings in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Plan name field while editing Account plan details...

CVE-2023-47097: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability in the Server Template under System Setting in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Template name field while creating server templates...