CVE-2011-5024

CVE-2011-5024 describes an XSS in the mmsearch/design component of the Mailman/htdig integration, allowing remote injection of script/HTML via the config parameter. Connected sources confirm the vulnerability in GNU Mailman mmsearch/design and note affected software as Mailman, with root cause a ...