{"id":"CVE-2023-47096","aliases":["EUVD-2023-51250","GHSA-chmg-hj6x-gq23"],"status":"published","title":"An issue was discovered in Virtualmin 7.7. The Cloudmin Services Client under System Settings...","description":"A Reflected Cross-Site Scripting (XSS) vulnerability in the Cloudmin Services Client under System Setting in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Cloudmin services master field.","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00506,"percentile":0.43701,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2023-10-31T00:00:00Z","modified":"2026-06-17T06:32:07Z","products":[{"vendor":"virtualmin","product":"virtualmin"}],"references":[{"url":"https://github.com/pavanughade43/Virtualmin-7.7/blob/main/CVE-2023-47096","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-47096"},{"url":"https://github.com/advisories/GHSA-chmg-hj6x-gq23"}],"sources":{"cve":[{"id":"CVE-2023-47096","description":"A Reflected Cross-Site Scripting (XSS) vulnerability in the Cloudmin Services Client under System Setting in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Cloudmin services master field.","status":"published","published":"2023-10-31T00:00:00Z","modified":"2024-09-05T18:07:31.242Z","updated_at":"2026-11-02T14:35:14.298866Z"}],"euvd":[{"id":"EUVD-2023-51250","description":"A Reflected Cross-Site Scripting (XSS) vulnerability in the Cloudmin Services Client under System Setting in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Cloudmin services master field.","status":"published","published":"2023-10-31T00:00:00Z","modified":"2024-09-05T18:07:31Z","updated_at":"2026-11-03T00:56:02.678796Z"}],"ghsa":[{"id":"GHSA-chmg-hj6x-gq23","title":"An issue was discovered in Virtualmin 7.7. The Cloudmin Services Client under System Settings...","description":"An issue was discovered in Virtualmin 7.7. The Cloudmin Services Client under System Settings allows XSS.","status":"published","published":"2023-11-01T00:30:49Z","modified":"2023-11-15T05:04:54Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:55:02.324014Z"}],"nvd":[{"id":"CVE-2023-47096","description":"A Reflected Cross-Site Scripting (XSS) vulnerability in the Cloudmin Services Client under System Setting in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Cloudmin services master field.","status":"published","published":"2023-11-01T00:15:09.467Z","modified":"2026-06-17T06:32:07.983Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:08:41.047232Z"}]}}