Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 11 Nov 2026 02:05:20 +0000 CVE-2026-124552 — Webmin through 2.670 Stored XSS via Shorewall and Shorewall6 list.cgi https://db.gcve.eu/vuln/cve-2026-124552 <p><strong>Affected:</strong> webmin</p> <p>Webmin through 2.670 contains a stored cross-site scripting vulnerability in the Shorewall and Shorewall6 modules&#39; list.cgi, which renders table fields and COMMENT lines unescaped. Authenticated users with table edit permission can store JavaScript via savecmt.cgi or table entries that executes when other users, including root, view the list page.</p> <p><strong>Affected:</strong> webmin</p> <p>Webmin through 2.670 contains a stored cross-site scripting vulnerability in the Shorewall and Shorewall6 modules&#39; list.cgi, which renders table fields and COMMENT lines unescaped. Authenticated users with table edit permission can store JavaScript via savecmt.cgi or table entries that executes when other users, including root, view the list page.</p> https://db.gcve.eu/vuln/cve-2026-124552