CVE-2020-13827

2020-06-0415:15:13

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.8%

JSON

phpList before 3.5.4 allows XSS via /lists/admin/user.php and /lists/admin/users.php.

CPENameOperatorVersion
phplist3eq3.5.0
phplist3eq.3.2.2
phplist3eq3.2.1
phplist3eq3.3.1
phplist3eq.3.3.4
phplist3eq.3.3.7
phplist3eq3.4.8
phplist3eq3.4.5
phplist3eq3.3.0
phplist3eq3.3.8

Name	Operator	Version
phplist3	eq	3.5.0
phplist3	eq	.3.2.2
phplist3	eq	3.2.1
phplist3	eq	3.3.1
phplist3	eq	.3.3.4
phplist3	eq	.3.3.7
phplist3	eq	3.4.8
phplist3	eq	3.4.5
phplist3	eq	3.3.0
phplist3	eq	3.3.8