Vulnerability Database

289,784

Total vulnerabilities in the database

CVE-2023-47096

A Reflected Cross-Site Scripting (XSS) vulnerability in the Cloudmin Services Client under System Setting in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Cloudmin services master field.

  • Published: Nov 1, 2023
  • Updated: Nov 7, 2023
  • CVE: CVE-2023-47096
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.4
  • AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
virtualmin / virtualmin 7.7 7.7.x