CVE-2018-19191

Severity: medium (CVSS 5.4 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 39.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-03-21 · updated 2026-06-17
Weakness: CWE-79

Description

Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.cgi uall or mall parameter.

Affected products

Webmin: 1.890

References

http://packetstormsecurity.com/files/151144/Webmin-1.890-Cross-Site-Scripting.html
http://www.webmin.com/index.html
http://packetstormsecurity.com/files/151144/Webmin-1.890-Cross-Site-Scripting.html
http://www.webmin.com/index.html

Get alerted when CVE-2018-19191 or the next vulnerability affects your stack