CVE-2026-123622 Usermin through 2.570 XSS via mailbox detach.cgi type Parameter

Usermin through 2.570 contains a cross-site scripting vulnerability in mailbox/detach.cgi that allows remote attackers to execute script by supplying an arbitrary type parameter that bypasses JavaScript filtering. Attackers can email an HTML attachment containing script and lure recipients to a...

CVE-2026-123622

Usermin versions through 2.570 are vulnerable to a cross-site scripting (XSS) vulnerability in the mailbox/detach.cgi component. The root cause is the ability for an attacker to supply an arbitrary type parameter that successfully bypasses JavaScript filtering. A remote attacker can exploit this ...

EUVD-2026-118298

Usermin through 2.570 contains a cross-site scripting vulnerability in mailbox/detach.cgi that allows remote attackers to execute script by supplying an arbitrary type parameter that bypasses JavaScript filtering. Attackers can email an HTML attachment containing script and lure recipients to a...

CVE-2026-123622: webmin usermin: Usermin through 2.570 contains a cross-site scripting vulnerability in mailbox/detach.cgi that allows remote attackers…

Usermin through 2.570 contains a cross-site scripting vulnerability in mailbox/detach.cgi that allows remote attackers to execute script by supplying an arbitrary type parameter that bypasses JavaScript filtering. Attackers can email an HTML attachment containing script and lure recipients to a...