CVE-2017-17089

Name of the Vulnerable Software and Affected Versions Webmin versions prior to 1.870

Description The issue allows remote authenticated administrators to conduct cross-site scripting (XSS) attacks. This is achieved by exploiting the description field in the custom command functionality of the custom/run.cgi module.

Recommendations For versions prior to 1.870, update to version 1.870 or later to resolve the issue. As a temporary workaround, consider restricting access to the custom command functionality to minimize the risk of exploitation.