Medium severity5.4NVD Advisory· Published Oct 12, 2020· Updated Jun 17, 2026

CVE-2020-8820

Description

An XSS Vulnerability exists in Webmin 1.941 and earlier affecting the Cluster Shell Commands Endpoint. A user may enter any XSS Payload into the Command field and execute it. Then, after revisiting the Cluster Shell Commands Menu, the XSS Payload will be rendered and executed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Webmin/Webmin2 versions
cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*range: <=1.941
- (no CPE)range: <=1.941
Webmin/Webmindescription
Webmin/Cluster Shell Commands Endpointllm-create
Range: <=1.941

Patches

Vulnerability mechanics

References

www.webmin.com/security.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000