VULNERABILITY INTELLIGENCE

CVE-2023-41155

CVSS score5.4 MEDIUM
EPSS probability0.54%
CISA KEVNot currently listed
Published2023-09-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

A Stored Cross-Site Scripting (XSS) vulnerability in the mail forwarding and replies tab in Webmin and Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the forward to field while creating a mail forwarding rule.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references