Description
A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Configure categories" field under the "Categorise Lists" module.
Unscored
CVE-2020-23214
EUVD-2020-15967GHSA-6mrf-9c3p-wq48
A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted …
Published Jul 1, 2021 · Updated Aug 4, 2024 · Assigned by mitre