CVE-2022-36880: Webmin Usermin

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

The Read Mail module in Webmin 1.995 and Usermin through 1.850 allows XSS via a crafted HTML e-mail message.

Affected products

• Webmin Usermin: up to and including 1.850
• Webmin Webmin: version 1.995 only

Published 2022-07-27. Last modified 2026-06-17.