CVE-2020-8820: Webmin

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

An XSS Vulnerability exists in Webmin 1.941 and earlier affecting the Cluster Shell Commands Endpoint. A user may enter any XSS Payload into the Command field and execute it. Then, after revisiting the Cluster Shell Commands Menu, the XSS Payload will be rendered and executed.

Affected products

• Webmin Webmin: up to and including 1.941

Published 2020-10-12. Last modified 2026-06-17.