phpList cross-site scripting vulnerability (CNVD-2021-48844)

phpList is an open source newsletter and email marketing software from phpList UK. A cross-site scripting vulnerability exists in phpList version 3.5.3, which can be exploited by adding a new administrator with the login field in the "Manage Administrators" section...