Lucene search
+L

7 matches found

BDU FSTEC
BDU FSTEC
•added 2021/12/17 12:00 a.m.•14 views

The vulnerability of the Categorise Lists module in the phplist web application allows a hacker to execute cross-site scripting.

The vulnerability of the Categorise Lists module in the phplist web application for email distribution management is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

5.4CVSS5.6AI score0.00551EPSS
SaveExploits1References2Affected Software1
NVD
NVD
•added 2021/07/01 9:15 p.m.•33 views

CVE-2020-23214

A stored cross site scripting XSS vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Configure categories" field under the "Categorise Lists" module...

5.4CVSS0.00551EPSS
SaveExploits1References1
OSV
OSV
•added 2021/07/01 9:15 p.m.•27 views

CVE-2020-23214

A stored cross site scripting XSS vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Configure categories" field under the "Categorise Lists" module...

5.4CVSS5.5AI score
SaveExploits0References1
Prion
Prion
•added 2021/07/01 9:15 p.m.•30 views

Cross site scripting

A stored cross site scripting XSS vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Configure categories" field under the "Categorise Lists" module...

3.5CVSS5.3AI score0.00551EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/07/01 8:12 p.m.•32 views

CVE-2020-23214

A stored cross site scripting XSS vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Configure categories" field under the "Categorise Lists" module...

5.6AI score0.00551EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/01 12:00 a.m.•2 views

CVE-2020-23214: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Configure categories" field under the "Categorise Lists" module...

5.4CVSS5.6AI score0.00551EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/05/27 12:00 a.m.•19 views

PT-2020-6545 · Phplist · Phplist

Name of the Vulnerable Software and Affected Versions: phplist version 3.5.3 Description: A stored cross site scripting XSS vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Configure categories field under the Categorise Lists module...

5.4CVSS5.3AI score0.00551EPSS
SaveExploits1References7
Rows per page
Query Builder