CVE-2023-41163

—

CVSS 3.1

6.1 medium

EPSS

<1%p43

Published

Aug 30, 2023 (Aug 30, 2023)

Modified

Jun 17, 2026

Description

A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the replace in results field while replacing the results under the tools drop down.

Vendors: webmin
Products: webmin
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.