Description
GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Server Log Viewer Cross-Site Scripting (1.0)
Oracle JRE CVE-2013-2425 Vulnerability (CVE-2013-2425)
Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2020-36231)
Drupal Core 8.9.x Cross-Site Scripting (8.9.0 - 8.9.17)
PostgreSQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-1052)