CVE-2017-17089

custom/run.cgi in Webmin before 1.870 allows remote authenticated administrators to conduct XSS attacks via the description field in the custom command functionality...

PT-2017-14704

Name of the Vulnerable Software and Affected Versions Webmin versions prior to 1.870 Description The issue allows remote authenticated administrators to conduct cross-site scripting XSS attacks. This is achieved by exploiting the description field in the custom command functionality of the...

CVE-2017-17089: Improper Neutralization of Input During Web Page Generation

custom/run.cgi in Webmin before 1.870 allows remote authenticated administrators to conduct XSS attacks via the description field in the custom command functionality...