Description
Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList before 2.10.19 allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter; or the (2) footer, (3) status, or (4) testtarget parameter in the send page.
Remediation
References
Related Vulnerabilities
Joomla! Core 1.5.x Variable Injection (1.5.0 - 1.5.6)
Microsoft SQL Server CVE-2023-36730 Vulnerability (CVE-2023-36730)
WordPress Plugin Catch Under Construction Security Bypass (1.3.4)
TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-5104)
Internet Information Services Other Vulnerability (CVE-1999-1544)