Skip to content
OpenAdvisories
Low · 3.5 CVE-2017-20034 EUVD-2017-11049GHSA-659x-gwx9-46gq

PHPList List Name Persistent cross site scriting

Published Jun 10, 2022 · Updated Apr 15, 2025 · Assigned by VulDB

Description

A vulnerability classified as problematic was found in PHPList 3.2.6. This vulnerability affects unknown code of the file /lists/admin/ of the component List Name. The manipulation leads to cross site scripting (Persistent). The attack can be initiated remotely. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component.

Affected products

VendorProductAffectedFixed
— PHPList 3.2.6 —

References