Description
Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page.
Remediation
References
Related Vulnerabilities
WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.5)
WordPress Plugin Thrive Dashboard Security Bypass (2.3.9.2)
WordPress Plugin DW Question & Answer Security Bypass (1.2.9)
WordPress Plugin WP Custom Admin Interface PHP Object Injection (7.28)
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-8657)