CVE-2025-28074中 6.1phpList before 3.6.15 is vulnerable to Cross-Site Scripting (XSS) due to improper input sanitization in lt.php. The vulnerability is exploit…
CVE-2025-28073中 6.1phpList before 3.6.15 is vulnerable to Reflected Cross-Site Scripting (XSS) via the /lists/dl.php endpoint. An attacker can inject arbitrary…
CVE-2023-27576中 6.7An issue was discovered in phpList before 3.6.14. Due to an access error, it was possible to manipulate and edit data of the system's super …
CVE-2017-20036中 5.4A vulnerability, which was classified as problematic, was found in PHPList 3.2.6. Affected is an unknown function of the file /lists/admin/ …
CVE-2017-20035中 5.4A vulnerability, which was classified as problematic, has been found in PHPList 3.2.6. This issue affects some unknown processing of the fil…