Description
GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create lists via the /mailman/create endpoint.
Remediation
References
Related Vulnerabilities
WordPress Plugin Local Market Explorer 'api-key' Parameter Cross-Site Scripting (3.1.1)
WordPress Plugin Qiniu Uploader Cross-Site Scripting (0.1)
WordPress Plugin Google Alert And Twitter Multiple Vulnerabilities (3.1.5)
CKEditor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-31541)