CVE-2017-20034 — PHPList List Name Persistent cross site scriting

CVE-2017-20034

PHPList List Name Persistent cross site scriting PUBLISHED

Description (CNA)

A vulnerability classified as problematic was found in PHPList 3.2.6. This vulnerability affects unknown code of the file /lists/admin/ of the component List Name. The manipulation leads to cross site scripting (Persistent). The attack can be initiated remotely. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component.

Affected (CNA)

Vendor / product	Versions
unspecified / PHPList	affected 3.2.6

CWE

CWE-80

References

http://seclists.org/fulldisclosure/2017/Mar/46
https://vuldb.com/?id.98920

ADP enrichment

CVE

No English description supplied.

http://seclists.org/fulldisclosure/2017/Mar/46
https://vuldb.com/?id.98920

CISA-ADP

No English description supplied.

No references supplied.