CVE-2026-123622

Usermin versions through 2.570 are vulnerable to a cross-site scripting (XSS) vulnerability in the mailbox/detach.cgi component. The root cause is the ability for an attacker to supply an arbitrary type parameter that successfully bypasses JavaScript filtering. A remote attacker can exploit this ...