CVE-2020-23209

creationtimestamp| type| source ---|---|--- 2021-07-02 00:31:21+00:00| seen| https://t.me/cibsecurity/25880...

CVE-2020-23209

phplist 3.5.3 contains a stored XSS in the List Description field of the Edit A List module. The issue allows execution of arbitrary scripts/HTML via crafted input; root cause is unsanitized/unsafe input handling. Affected component: List Description in phplist 3.5.3. Remediation: update to a new...