2 matches found
CVE-2026-49102
Webmin before 2.640 allows mailboxes/detach.cgi XSS via an SVG document attachment that is viewed in the mailboxes component, because image/svg+xml is used instead of a safe type e.g., text/plain...
6.1CVSS0.00263EPSS
SaveExploits0References4
CVE-2026-49102: Improper Neutralization of Input During Web Page Generation
Webmin before 2.640 allows mailboxes/detach.cgi XSS via an SVG document attachment that is viewed in the mailboxes component, because image/svg+xml is used instead of a safe type e.g., text/plain...
6.1CVSS5.8AI score0.00263EPSS
SaveExploits0References2
20