PH
Product
phpList
41
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 4Medium 21Low 1
Watch
Add phpList to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-27576 | 6.7 | Aug 18 | An issue was discovered in phpList before 3.6.14 Affected: 3.6.12 |
| CVE-2025-28073 | 6.1 | May 8 | phpList before 3.6.15 is vulnerable to Reflected Cross-Site Scripting (XSS) via the /lists/dl.php endpoint Affected: before 3.6.15 |
| CVE-2025-28074 | 6.1 | May 8 | phpList before 3.6.15 is vulnerable to Cross-Site Scripting (XSS) due to improper input sanitization in lt.php Affected: before 3.6.15 |
| CVE-2017-20033 | 6.1 | Jun 10 | A vulnerability classified as problematic has been found in PHPList 3.2.6 Affected: 3.2.6 |
| CVE-2020-13827 | 6.1 | Jun 4 | phpList before 3.5.4 allows XSS via /lists/admin/user.php and /lists/admin/users.php Affected: before 3.5.4 |
| CVE-2020-12639 | 6.1 | May 4 | phpList before 3.5.3 allows XSS, with resultant privilege elevation, via lists/admin/template.php Affected: before 3.5.3 |
| CVE-2017-20036 | 5.4 | Jun 10 | A vulnerability, which was classified as problematic, was found in PHPList 3.2.6 Affected: 3.2.6 |
| CVE-2017-20035 | 5.4 | Jun 10 | A vulnerability, which was classified as problematic, has been found in PHPList 3.2.6 Affected: 3.2.6 |
| CVE-2017-20034 | 5.4 | Jun 10 | A vulnerability classified as problematic was found in PHPList 3.2.6 Affected: 3.2.6 |
| CVE-2020-36399 | 5.4 | Jul 2 | A stored cross site scripting (XSS) vulnerability in phplist 3.5.4 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the "rule1"… Affected: through 3.5.4 |
| CVE-2020-36398 | 5.4 | Jul 2 | A stored cross site scripting (XSS) vulnerability in phplist 3.5.4 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the "Campaign"… Affected: through 3.5.4 |
| CVE-2020-23194 | 5.4 | Jul 2 | A stored cross site scripting (XSS) vulnerability in the "Import Subscribers" feature in phplist 3.5.4 and below allows authenticated attackers to execute arbitrary web scripts or… Affected: through 3.5.4 |
| CVE-2020-23192 | 5.4 | Jul 2 | A stored cross site scripting (XSS) vulnerability in phplist 3.5.4 and below allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload in the… Affected: through 3.5.4 |
| CVE-2020-23190 | 5.4 | Jul 2 | A stored cross site scripting (XSS) vulnerability in the "Import emails" module in phplist 3.5.4 allows authenticated attackers to execute arbitrary web scripts or HTML via a… Affected: 3.5.4 |
| CVE-2020-23217 | 5.4 | Jul 1 | A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Add a list"… Affected: 3.5.3 |
| CVE-2020-23214 | 5.4 | Jul 1 | A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Configure… Affected: 3.5.3 |
| CVE-2020-23209 | 5.4 | Jul 1 | A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "List… Affected: 3.5.3 |
| CVE-2020-23208 | 5.4 | Jul 1 | A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Send test"… Affected: 3.5.3 |
| CVE-2020-23207 | 5.4 | Jul 1 | A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Edit Values"… Affected: 3.5.3 |
| CVE-2020-15073 | 5.4 | Jul 8 | An issue was discovered in phpList through 3.5.4 Affected: through 3.5.4 |
| CVE-2020-22251 | 4.8 | Jul 6 | Cross Site Scripting (XSS) vulnerability in phpList 3.5.3 via the login name field in Manage Administrators when adding a new admin Affected: through 3.5.3 |
Showing 21