CVE-2023-41156

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-41156

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-41156.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-41156

Published

2023-09-14T00:00:00Z

Modified

2026-07-08T07:08:20.790921328Z

Summary

[none]

Details

A Stored Cross-Site Scripting (XSS) vulnerability in the filter and forward mail tab in Usermin 2.001 allows remote attackers to inject arbitrary web script or HTML via the save to new folder named field while creating a new filter.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/41xxx/CVE-2023-41156.json",
    "cna_assigner": "mitre"
}

References

Affected packages

Git / github.com/webmin/usermin

Affected ranges

Type

GIT

Repo

https://github.com/webmin/usermin

Events

Introduced

73f8aa6c6f570a6cff31e95a5c4b27b25e7f3aa8

Last affected

73f8aa6c6f570a6cff31e95a5c4b27b25e7f3aa8

Database specific

{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:webmin:usermin:2.001:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.001"
        },
        {
            "last_affected": "2.001"
        }
    ]
}

Affected versions

2.*

2.001

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-41156.json"