Product · Webmin

Usermin

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.1

CVE-2026-123622

Usermin through 2.570 XSS via mailbox detach.cgi type Parameter

Usermin through 2.570 contains a cross-site scripting vulnerability in mailbox/detach.cgi that allows remote attackers to execute script by supplying an arbitrary type parameter that bypasses JavaScript filtering. Attackers can email an HTML attachment contai…

Webmin Usermin

Nov 6, 2026
Medium 6.1

CVE-2024-36453

Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior to 1.970 and Usermin versions p…

Webmin Webmin Usermin

Jul 10, 2024