CVE-2023-41161

Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the key...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the key comment to different pages such as public key details, Export key, sign key, send to key server page, and fetch from key server page tab.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

参照URL

advisory github.com
advisory nvd.nist.gov
web github.com
web webmin.com