CVE-2023-41162

MEDIUM

Usermin 2.000 - Reflected Cross-Site Scripting via File Mask Field

Title source: llm

Description

A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the file mask field while searching under the tools drop down.

References (2)

Core 2

Core References

Third Party Advisory

https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41162

View Writeup ZIP pw:eip

Release Notes

https://webmin.com/tags/webmin-changelog/

Scores

CVSS v3 6.1

EPSS 0.0042

EPSS Percentile 33.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-79

Status published

Products (1)

webmin/usermin 2.000

Published Sep 13, 2023

Tracked Since Feb 18, 2026