| Package | Affected versions | Patched versions |
|---|---|---|
| webmin | ≤ 1.860 |
custom/run.cgi in Webmin before 1.870 allows remote authenticated administrators to conduct XSS attacks via the description field in the custom command functionality.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free