Threats tagged 'ghsa-q3xp-jr54-j7gw'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-125392Webmin through 2.670 contains a stored cross-site scripting vulnerability in bind8/edit_recs.cgi that outputs raw DNS Medium5.12026-11-10GCVE DatabaseCVE-2026-125392 Webmin versions through 2.670 have a stored cross-site scripting (XSS) vulnerability in the bind8/edit_recs.cgi script. This flaw allows delegated zone users, such as Virtualmin domain owners, to store DNS record values containing malicious scripts. These scripts execute in an administrator's browser when viewing zone records in ALL view mode, potentially compromising the administrator's session or data. Report on CVE-2026-125392 Vulnerability CWE-79 #ghsa-q3xp-jr54-j7gw	GCVE Database	2026-11-10

Page 1 of 1