VULNERABILITY INTELLIGENCE

CVE-2023-41161

CVSS score5.4 MEDIUM

EPSS probability0.49%

CISA KEVNot currently listed

Published2023-09-07

Last modified2026-06-17

Description

Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the key comment to different pages such as public key details, Export key, sign key, send to key server page, and fetch from key server page tab.