CVE-2012-4246

2012-08-1200:00:00

mitre

www.cve.org

cross-site scripting

phplist

remote attackers

AI Score

5.8

Confidence

High

EPSS

0.003

Percentile

70.8%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList before 2.10.19 allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter; or the (2) footer, (3) status, or (4) testtarget parameter in the send page.