Description
Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page.
Remediation
References
Related Vulnerabilities
Moodle CVE-2020-25698 Vulnerability (CVE-2020-25698)
PHP Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2011-0754)
WordPress Plugin Advanced Access Manager Cross-Site Scripting (6.7.9)
WordPress Plugin WP-Live Chat by 3CX Arbitrary File Upload (8.0.31)
WordPress Plugin Ultimate WP Query Search Filter Cross-Site Scripting (1.0.10)