Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-41162

A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the file mask field while searching under the tools drop down.

Published

2023-09-13T22:15:09.017

Last Modified

2024-11-21T08:20:42.123

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

Weaknesses

Type: Primary
CWE-79

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	webmin	usermin	2.000	Yes

References

https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41162 Third Party Advisory ([email protected])
https://webmin.com/tags/webmin-changelog/ Release Notes ([email protected])
https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41162 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://webmin.com/tags/webmin-changelog/ Release Notes (af854a3a-2127-422b-91ae-364da2661108)