CVE-2023-47097

Summary

CVE-2023-47097 is a Stored Cross-Site Scripting (XSS) vulnerability affecting Virtualmin 7.7. Attackers can exploit this issue by injecting arbitrary web scripts or HTML code into server templates through the Template name field during creation. This vulnerability poses a significant security risk as the malicious code will be executed whenever the template is used, potentially leading to unauthorized access or data theft. Virtualmin users are advised to update their software to a patched version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.