CVE-2023-41154

Summary

CVE-2023-41154 is a Stored Cross-Site Scripting (XSS) vulnerability affecting Usermin 2.000's scheduled cron jobs tab. This issue enables remote attackers to inject malicious web scripts or HTML code by manipulating the value field parameter when creating a new environment variable. Successful exploitation could result in unintended execution of an attacker's code within the Usermin interface, compromising user data and potentially leading to further attacks. Users are advised to update Usermin as soon as possible to protect against this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.