Unscored CVE-2023-41152 EUVD-2023-45671GHSA-95h3-45xv-3gqp

A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrar…

Published Sep 13, 2023 · Updated Sep 26, 2024 · Assigned by mitre

Description

A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the handle program field while creating a new MIME type program.

Advisories 1

WID-SEC-2023-2232 Usermin: Mehrere Schwachstellen ermöglichen Cross-Site Scripting BSI CERT-Bund (WID) · Sep 17, 2023

References

https://webmin.com/tags/webmin-changelog/
https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41152