CVE-2023-41159: XSS
A Stored Cross-Site Scripting (XSS) vulnerability while editing the autoreply file page in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML by editing the forward file manually.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-41159?
CVE-2023-41159 is a Stored Cross-Site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML by editing the autoreply file page in Usermin 2.000.
How does CVE-2023-41159 affect the affected software?
CVE-2023-41159 affects Usermin 2.000 where remote attackers can exploit it by manually editing the forward file in the autoreply page to inject arbitrary web script or HTML.
What is the severity of CVE-2023-41159?
CVE-2023-41159 has a severity level of medium with a CVSS score of 5.4.
How can I fix CVE-2023-41159?
To fix CVE-2023-41159, upgrade to a version of Usermin that is not affected by the vulnerability.
What are some references related to CVE-2023-41159?
You can find more information about CVE-2023-41159 at the following references: [Link 1](https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41159), [Link 2](https://webmin.com/tags/webmin-changelog/)