Description

Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList before 2.10.19 allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter; or the (2) footer, (3) status, or (4) testtarget parameter in the send page.

Remediation

References

CVE-2012-4246

Related Vulnerabilities

WordPress Plugin Calendar Event Multi View Multiple Vulnerabilities (1.1.4)

WebLogic Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2021-21347)

MediaWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-19709)

WordPress Plugin Catpro Gallery Arbitrary File Upload (3.8)

MySQL CVE-2021-2011 Vulnerability (CVE-2021-2011)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2012-4246