Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g4x4-9wcw-mh88

Опубликовано: 01 нояб. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

An issue was discovered in Virtualmin 7.7. The Custom Fields feature of Edit Virtual Server under System Customization allows XSS.

An issue was discovered in Virtualmin 7.7. The Custom Fields feature of Edit Virtual Server under System Customization allows XSS.

EPSS

Процентиль: 29%
0.00103
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
больше 2 лет назад

A Stored Cross-Site Scripting (XSS) vulnerability in the Custom fields of Edit Virtual Server under System Customization in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Batch Label field while details of Virtual Server.

EPSS

Процентиль: 29%
0.00103
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79