Threats tagged 'ghsa-6qcf-4v5f-2vjx'

Webmin versions up to 2.670 contain a stored cross-site scripting (XSS) vulnerability in the Shorewall and Shorewall6 modules. This flaw allows authenticated users with table edit permissions to inject JavaScript code via specific CGI scripts, which executes when other users view the affected pages. The vulnerability requires authentication and user interaction to exploit and impacts confidentiality and integrity with no availability impact.