CVE-2017-9313: Multiple Cross-site scripting (XSS) vulnerabilities in Webmin before 1.850 allow remote attackers to inject...

Security readout for executives and security teams

CVE-2017-9313 is a set of cross-site scripting issues in Webmin before 1.850. A remote attacker could inject script or HTML through specific Webmin CGI parameters. The main business risk is compromise of administrative browser sessions if a vulnerable Webmin interface is reachable and used by privileged staff. Organizations running Webmin versions before 1.850 have potential exposure, especially where Webmin is accessible from untrusted networks. The supplied affected-product metadata is incomplete, so exposure should be verified through actual Webmin version inventory rather than relying on CPE data. Treat this as a moderate-priority administrative-interface risk. It is not backed by confirmed active exploitation in the bundle, but vulnerable Webmin panels can expose privileged users to browser-session compromise. Patch or isolate exposed instances promptly. Mitigation focus: Upgrade Webmin to 1.850 or later, based on vendor guidance.; Do not treat Webmin 1.840 as remediated for this CVE.; Restrict Webmin access to trusted administrative networks..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.