leads to cross site scripting ","datePublished":"2022-06-10T09:30:34+00:00","dateModified":"2025-04-15T14:27:56.847000+00:00","inLanguage":"es","author":{"@type":"Organization","name":"Vexday"},"publisher":{"@type":"Organization","name":"Vexday","url":"https://vexday.io"},"mainEntityOfPage":"https://vexday.io/es/cve/CVE-2017-20033","keywords":"CVE-2017-20033, CWE-80","breadcrumb":{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Inicio","item":"https://vexday.io/es"},{"@type":"ListItem","position":2,"name":"CVE-2017-20033"}]}}← volver

CVE-2017-20033

PHPList Reflected cross site scriting

CVSS 4.3 MEDIUMEPSS 0.7%CWE-80

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 4.3EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

10 jun 2022Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A vulnerability classified as problematic has been found in PHPList 3.2.6. This affects an unknown part of the file /lists/admin/. The manipulation of the argument page with the input send\'\";><script>alert(8)</script> leads to cross site scripting (Reflected). It is possible to initiate the attack remotely. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Productos afectados

unspecified · PHPList

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://seclists.org/fulldisclosure/2017/Mar/46https://vuldb.com/?id.98919