GCVE - cpe:2.3:a:virtualmin:virtualmin:7.7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:virtualmin:virtualmin:7.7:*:*:*:*:*:*:*

part: a version: 7.7 update: *

Vendor	Virtualmin (`7de170a2-515e-5793-9fed-0d665a8c0666`)
Product	Virtualmin (`cf694111-83b8-5a4c-9e4c-0a901c01bc34`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/virtualmin/virtualmin-gpl`	purl2cpe	2026-06-01 10:14:38.992765

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-47099`	vulnerable	2026-06-08 06:14:23.925161	Details available A Stored Cross-Site Scripting (XSS) vulnerability in the Create Virtual Server in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via Description field while creating the Virtual server. Published: 2023-10-31T00:00:00.000Z Updated: 2024-09-05T18:03:02.998Z Open on db.gcve.eu Reference links https://github.com/pavanughade43/Virtualmin-7.7/blob/main/CVE-2023-47099	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-47098`	vulnerable	2026-06-08 06:14:23.924720	Details available A Stored Cross-Site Scripting (XSS) vulnerability in the Manage Extra Admins under Administration Options in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the real name or description field. Published: 2023-10-31T00:00:00.000Z Updated: 2024-09-05T18:04:40.654Z Open on db.gcve.eu Reference links https://github.com/pavanughade43/Virtualmin-7.7/blob/main/CVE-2023-47098	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-47097`	vulnerable	2026-06-08 06:14:23.924271	Details available A Stored Cross-Site Scripting (XSS) vulnerability in the Server Template under System Setting in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Template name field while creating server templates. Published: 2023-10-31T00:00:00.000Z Updated: 2024-09-05T18:05:50.531Z Open on db.gcve.eu Reference links https://github.com/pavanughade43/Virtualmin-7.7/blob/main/CVE-2023-47097	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-47096`	vulnerable	2026-06-08 06:14:23.923675	Details available A Reflected Cross-Site Scripting (XSS) vulnerability in the Cloudmin Services Client under System Setting in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Cloudmin services master field. Published: 2023-10-31T00:00:00.000Z Updated: 2024-09-05T18:07:31.242Z Open on db.gcve.eu Reference links https://github.com/pavanughade43/Virtualmin-7.7/blob/main/CVE-2023-47096	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-47095`	vulnerable	2026-06-08 06:14:23.923338	Details available A Stored Cross-Site Scripting (XSS) vulnerability in the Custom fields of Edit Virtual Server under System Customization in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Batch Label field while details of Virtual Server. Published: 2023-10-31T00:00:00.000Z Updated: 2024-09-05T18:09:02.260Z Open on db.gcve.eu Reference links https://github.com/pavanughade43/Virtualmin-7.7/blob/main/CVE-2023-47095	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-47094`	vulnerable	2026-06-08 06:14:23.922882	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Virtualmin 7.7

Notes

PURL mappings

Vulnerability references

Contribute