Description

Cross-site scripting (XSS) vulnerability in mmsearch/design in the Mailman/htdig integration patch for Mailman allows remote attackers to inject arbitrary web script or HTML via the config parameter.

Remediation

References

CVE-2011-5024

Related Vulnerabilities

WebLogic CVE-2022-21453 Vulnerability (CVE-2022-21453)

WordPress Plugin Custom Post Type Relations Cross-Site Scripting (1.0)

PHP CVE-2014-3479 Vulnerability (CVE-2014-3479)

Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1000406)

PHP Improper Input Validation Vulnerability (CVE-2011-4153)

Severity

Medium

Classification

CVE-2011-5024 CWE-707

Tags

Missing Update Known Vulnerabilities