CVE-2025-28074

phpList is vulnerable to Cross-Site Scripting (XSS) in lt.php across versions prior to 3.6.15 due to improper input sanitization and dynamic referencing of internal paths. The issue allows an attacker to inject malicious JavaScript when untrusted input is processed without proper escaping, with p...