CVE-2024-36453 - CVE House
Back to Database
Status published Unknown CVE-2024-36453

Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior...

Vulnerability Description

Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior to 1.970 and Usermin versions prior to 1.820. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a webpage may be altered or sensitive information such as a credential may be disclosed.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-36453

Credits & Attribution

No credits recorded in the NVD database.

References

More from Webmin

View All →
CVE-2025-67738
squid/cachemgr.cgi in Webmin before 2.600 does not properly quote arguments....
High 8.5
CVE-2024-36452
Cross-site request forgery vulnerability exists in ajaxterm module of Webmin...
Unknown 0
CVE-2024-36451
Improper handling of insufficient permissions or privileges vulnerability exists in...
Unknown 0
CVE-2024-36450
Cross-site scripting vulnerability exists in sysinfo.cgi of Webmin versions prior...
Unknown 0
CVE-2024-12828
Webmin CGI Command Injection Remote Code Execution Vulnerability
Critical 9.9

Affected Vendor

Affected Software

Webmin, Usermin
Vulnerable Versions:
versions prior to 1.970, versions prior to 1.820

Timeline

Official Publish: July 10th, 2024
Last Modified: November 6th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.