CVE-2023-38310

5.4 mediumEPSS 0.5%

Medium (5.4) in webmin webmin. EPSS 0.5% chance of exploitation in the next 30 days.

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the configuration settings of the system logs functionality. The vulnerability allows an attacker to store an XSS payload in the configuration settings of specific log files. This results in the execution of that payload whenever the affected log files are accessed.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2023-07-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

webmin:webmin

References

https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38310
https://webmin.com/tags/webmin-changelog/
https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38310
https://webmin.com/tags/webmin-changelog/

Check your stack JSON