UpHeron
All vulnerabilities

Servers and applications

CVE-2023-41155

A Stored Cross-Site Scripting (XSS) vulnerability in the mail forwarding and replies tab in Webmin and Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the forward to field while creating a mail forwarding rule.

Severity
Medium 5.4
Published
13 Sept 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
WebminServers and applications · cpe:a:webmin:webmin
  • Version 2.000

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-41155
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-41155