Description

A stored cross site scripting (XSS) vulnerability in the "Import emails" module in phplist 3.5.4 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload.

Remediation

References

CVE-2020-23190

Related Vulnerabilities

ProjectSend Use of Insufficiently Random Values Vulnerability (CVE-2024-7659)

WordPress Plugin Google Forms PHP Object Injection (0.87)

WordPress Plugin SVG Support Cross-Site Scripting (2.4.2)

SharePoint Other Vulnerability (CVE-2014-6357)

WordPress Plugin wp superb Slideshow Arbitrary File Upload (2.4)

Severity

Medium

Classification

CVE-2020-23190 CWE-707 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities