Description
A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Configure categories" field under the "Categorise Lists" module.
Remediation
References
Related Vulnerabilities
WordPress Plugin Child Theme Creator by Orbisius Cross-Site Request Forgery (1.5.1)
WordPress Plugin wp-FileManager Arbitrary File Disclosure (1.3.0)
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-13075)
WordPress Plugin Minimal Coming Soon & Maintenance Mode-Coming Soon Page Open Redirect (1.85)
SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-1102)