Vulnerabilities > Webmin > Usermin > 2.001

DATE CVE VULNERABILITY TITLE RISK
2023-09-14 CVE-2023-41156 Cross-site Scripting vulnerability in Webmin Usermin 2.001
A Stored Cross-Site Scripting (XSS) vulnerability in the filter and forward mail tab in Usermin 2.001 allows remote attackers to inject arbitrary web script or HTML via the save to new folder named field while creating a new filter.
network
low complexity
webmin CWE-79
5.4
2023-09-14 CVE-2023-41160 Cross-site Scripting vulnerability in Webmin Usermin 2.001
A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers to inject arbitrary web script or HTML via the key name field while adding an authorized key.
network
low complexity
webmin CWE-79
5.4
2023-08-29 CVE-2023-41153 Cross-site Scripting vulnerability in Webmin Usermin 2.001
A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers to inject arbitrary web script or HTML via options for the host value while editing the host options.
network
low complexity
webmin CWE-79
5.4