CVE-2023-41159: XSS
First published: Thu Sep 14 2023(Updated: )
A Stored Cross-Site Scripting (XSS) vulnerability while editing the autoreply file page in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML by editing the forward file manually.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Webmin Usermin | =2.000 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-41159?
CVE-2023-41159 is a Stored Cross-Site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML by editing the autoreply file page in Usermin 2.000.
How does CVE-2023-41159 affect the affected software?
CVE-2023-41159 affects Usermin 2.000 where remote attackers can exploit it by manually editing the forward file in the autoreply page to inject arbitrary web script or HTML.
What is the severity of CVE-2023-41159?
CVE-2023-41159 has a severity level of medium with a CVSS score of 5.4.
How can I fix CVE-2023-41159?
To fix CVE-2023-41159, upgrade to a version of Usermin that is not affected by the vulnerability.
What are some references related to CVE-2023-41159?
You can find more information about CVE-2023-41159 at the following references: [Link 1](https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41159), [Link 2](https://webmin.com/tags/webmin-changelog/)
- collector/nvd-api
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/event
- agent/weakness
- agent/type
- agent/description
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/webmin
- canonical/webmin usermin
- version/webmin usermin/2.000