Description
A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Send test" field under the "Start or continue campaign" module.
Remediation
References
Related Vulnerabilities
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2042)
Oracle JRE CVE-2020-2755 Vulnerability (CVE-2020-2755)
SharePoint CVE-2021-1726 Vulnerability (CVE-2021-1726)
WordPress Plugin Post Grid, List for WordPress-Content Views Cross-Site Scripting (1.9.0)
WordPress Plugin WP Gravity Forms Zoho CRM Add-on Cross-Site Scripting (1.1.5)