CVE-2023-38310

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-07-31 · updated 2026-06-17
Weakness: CWE-79

Description

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the configuration settings of the system logs functionality. The vulnerability allows an attacker to store an XSS payload in the configuration settings of specific log files. This results in the execution of that payload whenever the affected log files are accessed.

Affected products

Webmin: 2.021

References

https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38310
https://webmin.com/tags/webmin-changelog/
https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38310
https://webmin.com/tags/webmin-changelog/

Get alerted when CVE-2023-38310 or the next vulnerability affects your stack