Vulnerability · Published Jun 4, 2020 · Assigned by mitre

CVE-2020-13827

Medium 6.1

In plain English

A medium-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities).

Severity (CVSS NVD)6.1Medium

Exploit odds (30 days)0.9%top 41.0% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

phpList before 3.5.4 allows XSS via /lists/admin/user.php and /lists/admin/users.php.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

https://www.phplist.org/newslist/phplist-3-5-4-release-notes/ x_refsource_MISC
https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2020-004 x_refsource_MISC