CVE-2023-38307

Vulnerability #5: CVE-2023-38307 
Description:
An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users and Groups functionality. The vulnerability occurs when an authenticated user adds a new user and inserts an XSS payload into the user's real name if we try to delete the user.

RISK FACTOR:  High
Affected Component - Users Real name parameter
Procedure for reproducing the issue:
1.	Access the Webmin administrative interface and navigate to "System" >> "Users and Groups" section.
2.	Create a new user account and insert an XSS payload into the user's real name field.
3.	Try to Delete the user created!