VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Sep 7, 2023· Updated Jun 17, 2026

CVE-2023-41161

CVE-2023-41161

Description

Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the key comment to different pages such as public key details, Export key, sign key, send to key server page, and fetch from key server page tab.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Webmin/Usermin
    cpe:2.3:a:webmin:usermin:2.000:*:*:*:*:*:*:*
  • Usermin/Usermincpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: = 2.000

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.