| Package | Affected versions | Patched versions |
|---|---|---|
| phplist | < 3.5.4 | 3.5.4 |
phpList before 3.5.4 allows XSS via /lists/admin/user.php and /lists/admin/users.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free