Description
A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Edit Values" field under the "Configure Attributes" module.
Remediation
References
Related Vulnerabilities
WordPress Plugin MAC PHOTO GALLERY 'albid' Parameter Arbitrary File Disclosure (2.8)
MediaWiki CVE-2021-42049 Vulnerability (CVE-2021-42049)
WordPress Plugin Ajax Gallery 'list.php' SQL Injection (3.0)
MySQL Improper Initialization Vulnerability (CVE-2020-11655)
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-25673)