Advisories · Technology
phpList.
Every CVE that names phpList among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
phpList before 3.6.17 Cross-Site Request Forgery via massremove.php
- phpList
- Cross-site request forgery (CSRF)
- CVSS 3.5 Low
PHPList Bounce Rule Persistent cross site scriting
- PHPList
- Cross-site scripting (XSS)
- CVSS 3.5 Low
PHPList Subscribe Persistent cross site scriting
- PHPList
- Cross-site scripting (XSS)
- CVSS 3.5 Low
PHPList List Name Persistent cross site scriting
- PHPList
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
PHPList Reflected cross site scriting
- PHPList
- Cross-site scripting (XSS)
- CVSS 6.3 Medium
PHPList Subscription sql injection
- PHPList
- SQL injection
- CVSS 2.7 Low
PHPList information disclosure
- PHPList
- Information disclosure
- CVSS 4.7 Medium
PHPList Sending Campain sql injection
- PHPList
- SQL injection
- CVSS 7.3 HighCritical · CVSS 7+ and EPSS
PHPList Edit Subscription index.php sql injection
- PHPList
- SQL injection