CVE-2023-47095

2023-10-3100:00:00

mitre

github.com

cross-site scripting

edit virtual server

remote attackers

arbitrary web script

html

batch label

virtual server

AI Score

5.5

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

A Stored Cross-Site Scripting (XSS) vulnerability in the Custom fields of Edit Virtual Server under System Customization in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Batch Label field while details of Virtual Server.