CVE-2020-23214

CVE-2020-23214 is a stored XSS vulnerability in phplist 3.5.3 that allows an attacker to inject and execute arbitrary web scripts/HTML through the Configure categories field in the Categorise Lists module. Public references across multiple sources (NVD, OSV, CNVD, Red Hat, etc.) confirm the same ...