AI Score
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the description field while creating a new MIME type program.
github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41158
webmin.com/tags/webmin-changelog/