CVE-2021-32157

CRITICAL

Webmin 1.973 - Stored Cross-Site Scripting via Scheduled Cron Jobs Feature

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2021-32157. PoCs published by dnr6419, Mesh3l911.

AI-analyzed exploit summary This repository contains a functional exploit for CVE-2021-32157, a vulnerability in Webmin 1.973 that allows remote code execution via a CSRF attack on the cron job feature. The exploit generates a malicious link that, when visited by an authenticated admin, executes a reverse shell payload.

Description

A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature.

Exploits (2)

nomisec WORKING POC 1 stars
by dnr6419 · poc
https://github.com/dnr6419/CVE-2021-32157

This repository contains a functional exploit for CVE-2021-32157, a vulnerability in Webmin 1.973 that allows remote code execution via a CSRF attack on the cron job feature. The exploit generates a malicious link that, when visited by an authenticated admin, executes a reverse shell payload.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Webmin 1.973
Auth required
Prerequisites: Authenticated admin session in Webmin · Network access to the target Webmin instance
devstral-2 · analyzed Feb 18, 2026 Full analysis →
nomisec WORKING POC
by Mesh3l911 · poc
https://github.com/Mesh3l911/CVE-2021-32157

This repository contains a functional exploit for CVE-2021-32157, which chains a reflected XSS vulnerability in Webmin to achieve remote command execution via cron job manipulation. The exploit generates a malicious link that, when visited by an authenticated admin, triggers a reverse shell.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Webmin 1.973
Auth required
Prerequisites: Authenticated admin session in Webmin · Network access to the target Webmin instance
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (1)

Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://github.com/Mesh3l911/CVE-2021-32157

Scores

CVSS v3 9.6
EPSS 0.0409
EPSS Percentile 89.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Details

CWE
CWE-79
Status published
Products (1)
webmin/webmin 1.973
Published Apr 11, 2022
Tracked Since Feb 18, 2026