Description
GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.
Remediation
References
Related Vulnerabilities
WordPress Plugin Improved user search in backend Cross-Site Request Forgery (1.2.4)
Python Untrusted Search Path Vulnerability (CVE-2023-41105)
MediaWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-31548)
WordPress 4.9.x Multiple Vulnerabilities (4.9 - 4.9.13)
WordPress Plugin UserPro-Community and User Profile Cross-Site Scripting (4.9.23)