CVE-2023-41159

MEDIUM

Usermin 2.000 - Stored Cross-Site Scripting via Autoreply File Editing

Title source: llm
STIX 2.1

Description

A Stored Cross-Site Scripting (XSS) vulnerability while editing the autoreply file page in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML by editing the forward file manually.

References (2)

Core 2

Scores

CVSS v3 5.4
EPSS 0.0042
EPSS Percentile 33.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-79
Status published
Products (1)
webmin/usermin 2.000
Published Sep 14, 2023
Tracked Since Feb 18, 2026