Skip to content
OpenAdvisories

Vendor

phplist

3 known vulnerabilities.

Products

phplist3 2 phpList 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-73481

    phpList < 3.7.0-RC5 Cross-Site Request Forgery via Bounce Rules

    phpList before 3.7.0-RC5 fail to enforce CSRF token validation on the bounce rule deletion endpoint (bouncerules.php / bouncerule.php). The deletion is performed via a GET request (?page=bouncerules&del=N), and the central CSRF check (verifyCsrfGetToken) is i…

    phplist phplist3