← All advisories

Medium severity6.1NVD Advisory· Published Jun 4, 2020· Updated Jun 17, 2026

CVE-2020-13827

CVE-2020-13827

Description

phpList before 3.5.4 allows XSS via /lists/admin/user.php and /lists/admin/users.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Phplist/Phplist2 versions
cpe:2.3:a:phplist:phplist:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:phplist:phplist:*:*:*:*:*:*:*:*range: <3.5.4
- (no CPE)range: <3.5.4
phpList/phpListdescription
osv-coords
pkg:bitnami/phplist
Range: < 3.5.4

Patches

Vulnerability mechanics

References

2

www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2020-004nvdExploitThird Party Advisory
www.phplist.org/newslist/phplist-3-5-4-release-notes/nvdRelease Notes

News mentions

0

No linked articles in our index yet.