Skip to content
OpenAdvisories

Product · phplist

phplist3

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-73482

    phpList < 3.7.0-RC5 Cross-Site Request Forgery via admins.php

    phpList before 3.7.0-RC5 contains a cross-site request forgery (CSRF) vulnerability in lists/admin/admins.php. The administrator deletion action is triggered via an unauthenticated GET request (?page=admins&delete=N) that is not protected by a CSRF token (the…

    phplist phplist3