CVE-2002-0855

published 2002-09-05

CVE-2002-0855: Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

EXPLOIT

Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the (1) adminpw or (2) info parameters to the ml-name feature.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
gnu	mailman	—	—