| Package | Affected versions | Patched versions |
|---|---|---|
| phplist | = 3.6.0 |
phpList 3.6.0 allows CSV injection, related to the email parameter, and /lists/admin/ exports.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free