https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T01:48:55.123461+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-243318 EUVD-2026-243318 2026-10-06T01:48:55.176743+00:00 EUVD-2026-243318 https://cve.radiocsirt.org/vuln/fkie_cve-2025-28074 fkie_cve-2025-28074 2026-10-06T01:48:55.176828+00:00

phpList before 3.6.15 is vulnerable to Cross-Site Scripting (XSS) due to improper input sanitization in lt.php. The vulnerability is exploitable when the application dynamically references internal paths and processes untrusted input without escaping, allowing an attacker to inject malicious JavaScript.

 https://cve.radiocsirt.org/vuln/ghsa-9vv2-f3c8-m9x6 GHSA-9vv2-f3c8-m9x6 2026-10-06T01:48:55.176875+00:00

phpList prior to 3.6.3 is vulnerable to Cross-Site Scripting (XSS) due to improper input sanitization in lt.php. The vulnerability is exploitable when the application dynamically references internal paths and processes untrusted input without escaping, allowing an attacker to inject malicious JavaScript.