CVE-2021-43331

MEDIUM 6.1CVE-2021-43331 · Published 12/11/2021 · updated 17/06/2026

In short

CVE-2021-43331 is a MEDIUM (CVSS 6.1) vulnerability affecting mailman (gnu).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.1% of all vulnerabilities.
Fix: update to 2.1.36 or later.

Package	Affected versions	Patched versions
mailman gnu	`< 2.1.36`	`2.1.36`

In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for XSS.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 2.1.36

2.1.36

More vulnerabilities in mailman

See all →