Description
Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page.
Remediation
References
Related Vulnerabilities
Drupal Core 5.x Information Disclosure (5.0 - 5.18)
Ruby on Rails Improper Input Validation Vulnerability (CVE-2013-6414)
ownCloud Improper Authentication Vulnerability (CVE-2014-2047)
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5478)
WordPress Plugin ManageWP Worker Unspecified Vulnerability (4.1.7)