Description
A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Edit Values" field under the "Configure Attributes" module.
Unscored
CVE-2020-23207
EUVD-2020-15960GHSA-hfw5-56xr-j99r
A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted …
Published Jul 1, 2021 · Updated Aug 4, 2024 · Assigned by mitre