Description
Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList before 2.10.19 allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter; or the (2) footer, (3) status, or (4) testtarget parameter in the send page.
Remediation
References
Related Vulnerabilities
Artifactory Insufficiently Protected Credentials Vulnerability (CVE-2018-1000424)
Apache HTTP Server Other Vulnerability (CVE-2004-0493)
WebLogic CVE-2022-21353 Vulnerability (CVE-2022-21353)
WordPress Plugin Structured Content (JSON-LD) #wpsc Cross-Site Scripting (1.5)
WordPress 4.2.x Same Origin Method Execution (SOME) Vulnerability (4.2 - 4.2.7)