CVE-2020-22251

MEDIUM 4.8CVE-2020-22251 · Published 06/07/2021 · updated 17/06/2026

In short

CVE-2020-22251 is a MEDIUM (CVSS 4.8) vulnerability affecting phplist (phplist).
Chance of exploitation in the next 30 days (EPSS): 0.62%, higher than 49.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
phplist phplist	`≤ 3.5.3`	No fix yet

Cross Site Scripting (XSS) vulnerability in phpList 3.5.3 via the login name field in Manage Administrators when adding a new admin.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

≤ 3.5.3

No fix yet

More vulnerabilities in phplist

See all →