BIT-phplist-2020-15073

vendorUSosv

view advisory published 2024-03-06Licence: per source

An issue was discovered in phpList through 3.5.4. An XSS vulnerability occurs within the Import Administrators section via upload of an edited text document. This also affects the Subscriber Lists section.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-15073US	medium5.4	0.75% (55th)	—	2020-07-08
An issue was discovered in phpList through 3.5.4. An XSS vulnerability occurs within the Import Administrators section via upload of an edited text document. This also affects the…

references

External citations — patches, advisories, analysis.

https://blog.telspace.co.za/2020/07/phplist-cve-2020-15072-cve-2020-15073.htmlWEB
https://discuss.phplist.org/t/phplist-3-5-5-has-been-released/6377WEB
https://www.phplist.org/newslist/phplist-3-5-5-release-notes/WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan