CVE-2023-41163

MediumCVSS 6.1

Published: 30/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.42%

34th percentile - higher than 34% of all known CVEs

Summary

Usermin 2.000 has a Reflected Cross-site Scripting (XSS) vulnerability in the file manager tab that allows remote attackers to inject arbitrary web scripts or HTML via the 'replace in results' field while replacing results under the tools dropdown.

Risk Assessment

This vulnerability could lead to user data theft or session hijacking, posing a significant security risk to the organization.

Recommendation

It is recommended to update Usermin to the latest version and implement input validation to minimize the risk of XSS attacks.

Original NVD description (English source)

A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the replace in results field while replacing the results under the tools drop down.