CVE-2020-8820

5.4 mediumEPSS 0.6%

Medium (5.4) in webmin webmin. EPSS 0.6% chance of exploitation in the next 30 days.

An XSS Vulnerability exists in Webmin 1.941 and earlier affecting the Cluster Shell Commands Endpoint. A user may enter any XSS Payload into the Command field and execute it. Then, after revisiting the Cluster Shell Commands Menu, the XSS Payload will be rendered and executed.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2020-10-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

webmin:webmin

References

https://www.webmin.com/security.html
https://www.webmin.com/security.html

Check your stack JSON