CVE-2023-41163

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-08-30 · updated 2026-06-17
Weakness: CWE-79

Description

A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the replace in results field while replacing the results under the tools drop down.

Affected products

Webmin: 2.000

References

https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41163
https://webmin.com/tags/webmin-changelog/
https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41163
https://webmin.com/tags/webmin-changelog/

Get alerted when CVE-2023-41163 or the next vulnerability affects your stack