CVE-2011-1937: Cross-site scripting (XSS) vulnerability in Webmin 1.540 and earlier allows local users to inject arbitrary...

Security readout for executives and security teams

In Webmin 1.540 and earlier, a local account holder could place script or HTML in the Full Name field. If Webmin displayed it without proper escaping, a privileged Webmin user’s browser could run attacker-controlled script. The cited material frames this as possible privilege escalation through the admin interface, not unauthenticated remote compromise. Exposure is most likely on legacy systems running Webmin 1.540 or earlier, especially where non-admin local users can change account metadata and administrators use Webmin to inspect users. Prioritize remediation on servers where Webmin manages privileged administration and local users exist. This is not evidenced as mass internet exploitation, but stale admin tooling can turn a low-access foothold into higher-impact compromise. Mitigation focus: Upgrade Webmin using vendor or distribution packages that include the upstream fix.; Check Mandriva or platform-specific advisories if managing distribution-packaged Webmin.; Restrict Webmin access to trusted administrative networks and users..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.