| Package | Affected versions | Patched versions |
|---|---|---|
| listserv | < 17.0 | 17.0 |
The REPORT (after z but before a) parameter in wa.exe in L-Soft LISTSERV 16.5 before 17 allows an attacker to conduct XSS attacks via a crafted URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free