Unrated severityNVD Advisory· Published May 30, 2014· Updated May 6, 2026

CVE-2014-3924

Description

Multiple cross-site scripting (XSS) vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows.

Affected products

Webmin/Userwin
cpe:2.3:a:webmin:userwin:*:*:*:*:*:*:*:*
Range: <=1.590
Webmin/Webmin
cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*
Range: <=1.680

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.webmin.com/changes.htmlnvdVendor Advisory
www.webmin.com/uchanges.htmlnvdVendor Advisory
secunia.com/advisories/58917nvd
secunia.com/advisories/58919nvd
www.securityfocus.com/bid/67647nvd
www.securityfocus.com/bid/67649nvd
www.securitytracker.com/id/1030296nvd
www.securitytracker.com/id/1030297nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000