CVE-2021-31761: Webmin

Critical severity, CVSS 9.6. EPSS: 33.6% chance of exploitation in the next 30 days.

Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command Execution through Webmin's running process feature.

Affected products

• Webmin Webmin: version 1.973 only

Published 2021-04-25. Last modified 2026-06-17.