PT-2021-10853 · Phplist · Phplist
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
phplist version 3.5.4
Description
A stored cross site scripting (XSS) issue in the "Import emails" module allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload.
Recommendations
For phplist version 3.5.4, consider disabling the "Import emails" module until a patch is available to prevent exploitation.
Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Phplist