CVE-2012-4246

MEDIUM 4.3CVE-2012-4246 · Published 12/08/2012 · updated 16/06/2026

In short

CVE-2012-4246 is a MEDIUM (CVSS 4.3) vulnerability affecting phplist (phplist).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
phplist phplist	`= 2.10.1= 2.10.10= 2.10.11= 2.10.12= 2.10.13= 2.10.14= 2.10.15= 2.10.16= 2.10.17= 2.10.2= 2.10.3= 2.10.4= 2.10.5= 2.10.7= 2.10.8= 2.10.9= 2.6.5= 2.7.1= 2.7.2= 2.8.12= 2.8.2= 2.8.7≤ 2.10.18`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList before 2.10.19 allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter; or the (2) footer, (3) status, or (4) testtarget parameter in the send page.

References

More vulnerabilities in phplist

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

phplist

= 2.10.1= 2.10.10= 2.10.11= 2.10.12= 2.10.13= 2.10.14= 2.10.15= 2.10.16= 2.10.17= 2.10.2= 2.10.3= 2.10.4= 2.10.5= 2.10.7= 2.10.8= 2.10.9= 2.6.5= 2.7.1= 2.7.2= 2.8.12= 2.8.2= 2.8.7≤ 2.10.18

No fix yet

More vulnerabilities in phplist

See all →