CVE-2002-0756: Usermin

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in the authentication page for (1) Webmin 0.96 and (2) Usermin 0.90 allows remote attackers to insert script into an error page and possibly steal cookies.

Affected products

• Usermin Usermin: version 0.7 only; version 0.8 only; version 0.9 only
• Webmin Webmin: version 0.91 only; version 0.92 only; version 0.92.1 only; version 0.93 only; version 0.94 only; version 0.95 only; …

Published 2002-08-12. Last modified 2026-06-16.