CVE-2020-12670

CVE-2020-12670 affects Webmin 1.941 and earlier. The vulnerability is a cross-site scripting flaw in the Save function of the Read User Email Module / mailboxes Endpoint, where output is parsed without sanitizing SCRIPT elements, unlike the View function which sanitizes input. A malicious user ca...