What’s Vulnerable › Vulnerabilities
CVE-2020-8820
- Severity: medium (CVSS 5.4 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2020-10-12 · updated 2026-06-17
- Weakness: CWE-79
Description
An XSS Vulnerability exists in Webmin 1.941 and earlier affecting the Cluster Shell Commands Endpoint. A user may enter any XSS Payload into the Command field and execute it. Then, after revisiting the Cluster Shell Commands Menu, the XSS Payload will be rendered and executed.
Affected products
- Webmin: through 1.941
References
Get alerted when CVE-2020-8820 or the next vulnerability affects your stack