CVE Catalog
CVE-2023-41153
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk0.43%
34th percentile - higher than 34% of all known CVEs
Summary
A Stored Cross-Site Scripting (XSS) vulnerability in Usermin 2.001's SSH configuration tab allows remote attackers to inject arbitrary web scripts or HTML via options for the host value while editing host options.
Risk Assessment
This vulnerability could lead to session hijacking or data theft, posing a significant security threat to the organization.
Recommendation
It is recommended to update Usermin to the latest version and review the configuration to minimize the risk of XSS attacks.
Original NVD description (English source)
A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers to inject arbitrary web script or HTML via options for the host value while editing the host options.