Unscored severity · published May 30, 2014
CVE-2014-3924
Multiple cross-site scripting (XSS) vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
US
Userwin · Webmin
through 1.590 · source: NVD
WE
Webmin · Webmin
through 1.680 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3924
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3924
secunia.com
http://secunia.com/advisories/58917
secunia.com
http://secunia.com/advisories/58919
www.securityfocus.com
http://www.securityfocus.com/bid/67647
www.securityfocus.com
http://www.securityfocus.com/bid/67649
www.securitytracker.com
http://www.securitytracker.com/id/1030296
www.securitytracker.com
http://www.securitytracker.com/id/1030297