CVE-2021-31761

9.6 criticalEPSS 34%

Critical (9.6) in webmin webmin. EPSS 34% chance of exploitation in the next 30 days.

Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command Execution through Webmin's running process feature.

Severity

9.6 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS: 34% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-04-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19