GitHub Advisoryadvisory · PyPI

GHSA-82rm-28q9-435p Mailman Cross-site scripting (XSS) vulnerability

MEDIUM Published 2022-04-29 Modified 2023-09-18 Official page ↗
Aliases
CVE-2003-0038
Ecosystem
PyPI
Packages
mailman
Severity
Moderate
Weaknesses
CWE-79
Reviewed
2023-09-18

Affected packages

• PyPI mailman: < 2.1.1 → fixed in 2.1.1

Description

Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via the (1) email or (2) language parameters.

Related

Alias · CVE (1)

  • CVE-2003-0038 Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References