Description

Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2018-0618

Related Vulnerabilities

WordPress Plugin Wordfence Security-Firewall & Malware Scan Cross-Site Scripting (5.1.4)

Oracle Database Server Uncontrolled Resource Consumption Vulnerability (CVE-2026-47046)

WordPress 5.0.x Cross-Site Request Forgery (5.0 - 5.0.3)

Oracle JRE CVE-2013-1563 Vulnerability (CVE-2013-1563)

Drupal Resource Management Errors Vulnerability (CVE-2014-5265)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2018-0618