phplist cross-site scripting vulnerability (CNVD-2021-48518)

phpList is an open source newsletter and email marketing software from phpList UK. A stored cross-site scripting vulnerability exists in the "Import Subscribers" feature in phplist 3.5.4 and earlier versions, which can be exploited to execute arbitrary web script or HTML...