Unscored CVE-2023-41158 EUVD-2023-45677GHSA-rch2-mghg-w43q

A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrar…

Published Sep 13, 2023 · Updated Sep 25, 2024 · Assigned by mitre

Description

A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the description field while creating a new MIME type program.

Advisories 1

WID-SEC-2023-2232 Usermin: Mehrere Schwachstellen ermöglichen Cross-Site Scripting BSI CERT-Bund (WID) · Sep 17, 2023

References

https://webmin.com/tags/webmin-changelog/
https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41158