CVE-2021-32157

Published Apr 11, 2022·Updated Jun 16, 2026

NVD Description

A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature.

PoC: CVE-2021-32157

Make it possible to build a vulnerable webmin virtual environment as a container using docker

PoC: CVE-2021-32157

Exploiting a Reflected Cross-Site Scripting (XSS) attack to get a Remote Command Execution (RCE) through the Webmin's Scheduled Cron Jobs feature

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Get alerted for CVEs like this