GHSA-82rm-28q9-435pMedium

Mailman Cross-site scripting (XSS) vulnerability

Published
April 29, 2022
Last Modified
September 18, 2023

🔗 CVE IDs covered (1)

CVE-2003-0038 →

📋 Description

Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via the (1) email or (2) language parameters.

🎯 Affected products1

  • pip/mailman:< 2.1.1

🔗 References (9)