https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T13:34:20.032781+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-243319 EUVD-2026-243319 2026-10-05T13:34:20.097944+00:00 EUVD-2026-243319 https://cve.radiocsirt.org/vuln/fkie_cve-2025-28073 fkie_cve-2025-28073 2026-10-05T13:34:20.097992+00:00

phpList before 3.6.15 is vulnerable to Reflected Cross-Site Scripting (XSS) via the /lists/dl.php endpoint. An attacker can inject arbitrary JavaScript code by manipulating the id parameter, which is improperly sanitized.

 https://cve.radiocsirt.org/vuln/ghsa-4pgh-326f-32p3 GHSA-4pgh-326f-32p3 2026-10-05T13:34:20.098027+00:00

phpList 3.6.3 is vulnerable to Reflected Cross-Site Scripting (XSS) via the /lists/dl.php endpoint. An attacker can inject arbitrary JavaScript code by manipulating the id parameter, which is improperly sanitized.