Description

An issue was discovered in phpList through 3.5.4. An XSS vulnerability occurs within the Import Administrators section via upload of an edited text document. This also affects the Subscriber Lists section.

Remediation

References

CVE-2020-15073

Related Vulnerabilities

WordPress Other Vulnerability (CVE-2007-1622)

LimeSurvey Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2019-16175)

Ruby on Rails CVE-2021-22902 Vulnerability (CVE-2021-22902)

Apache HTTP Server Improper Input Validation Vulnerability (CVE-2011-3368)

MySQL CVE-2012-3167 Vulnerability (CVE-2012-3167)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2020-15073