CVE-2023-40986

A stored cross-site scripting XSS vulnerability in the Usermin Configuration function of Webmin v2.100 allows attackers to execute arbitrary web sripts or HTML via a crafted payload injected into the Custom field...

CVE-2023-40986

CVE-2023-40986 concerns a stored XSS in the Usermin Configuration function of Webmin v2.100, triggered by a crafted payload in the Custom field that can cause arbitrary web scripts/HTML execution. The connected sources (Red Hat advisory, CVE records, Nessus/DSS descriptions, and CVE lists) consis...