CVEvulnerability
CVE-2023-41159
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-09-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-79
Description
A Stored Cross-Site Scripting (XSS) vulnerability while editing the autoreply file page in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML by editing the forward file manually.
Affected configurations
• webmin usermin 2.000
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41159 Third Party Advisory
- https://webmin.com/tags/webmin-changelog/ Release Notes
- https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41159 Third Party Advisory
- https://webmin.com/tags/webmin-changelog/ Release Notes