CVE-2014-3924 Multiple cross-site scripting (XSS) vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows.
MediumCVSS 4.3
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webmin userwin | <= 1.590 | No fix listed |
| webmin | <= 1.680 | No fix listed |
References
- 58917 third-party-advisory
- 58919 third-party-advisory
- 67647 vdb-entry
- 67649 vdb-entry
- 1030296 vdb-entry
- 1030297 vdb-entry
- www.webmin.com vendor-advisory
- www.webmin.com vendor-advisory