| Package | Affected versions | Patched versions |
|---|---|---|
| usermin | = 1.000= 1.010= 1.020= 1.030= 1.040= 1.051= 1.060= 1.070= 1.080= 1.090= 1.100= 1.110= 1.120= 1.130= 1.140= 1.150= 1.210= 1.220= 1.230= 1.240= 1.250 | |
| webmin | = 1.0.00= 1.0.10= 1.0.20= 1.0.30= 1.0.40= 1.0.50= 1.0.51= 1.0.60= 1.0.70= 1.0.80= 1.0.90= 1.1.00= 1.1.10= 1.1.20= 1.1.21= 1.1.30= 1.1.40= 1.1.50= 1.2.20= 1.2.30= 1.2.40= 1.2.50= 1.3.20 |
Multiple cross-site scripting (XSS) vulnerabilities in chooser.cgi in Webmin before 1.330 and Usermin before 1.260 allow remote attackers to inject arbitrary web script or HTML via a crafted filename.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free