Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webmin_search.cgi URI.Referenceshttps://0day.today/exploit/description/31282
