Description
Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) full name or (2) username field in a confirmation message.
Remediation
References
Related Vulnerabilities
Perl Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-1238)
WordPress Plugin File Manager Advanced Shortcode Arbitrary File Upload (2.5.3)
WordPress Plugin Visual CSS Style Editor Security Bypass (7.1.9)
Moodle CVE-2021-36394 Vulnerability (CVE-2021-36394)
Plone CMS Improper Authentication Vulnerability (CVE-2009-0662)