CVE-2023-41157

Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the folder name…

published September 16, 2023

CVSS
—
EPSS
0%
Percentile
41.5
In the wild
Unconfirmed
What it is

Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the folder name parameter while creating the folder to manage the folder tab, filter tab, and forward mail tab.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00494 · 41.5th percentile
Published
2023-09-16T00:00Z
EPSS history
Timeline
  • 16 SEP 00:00Z
    Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the folder name…
    cvelistv5