Medium severity5.4NVD Advisory· Published Jul 8, 2020· Updated Jun 17, 2026

CVE-2020-15073

Description

An issue was discovered in phpList through 3.5.4. An XSS vulnerability occurs within the Import Administrators section via upload of an edited text document. This also affects the Subscriber Lists section.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Phplist/Phplist3 versions
cpe:2.3:a:phplist:phplist:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:phplist:phplist:*:*:*:*:*:*:*:*range: <=3.5.4
- (no CPE)
- (no CPE)range: <=3.5.4
osv-coords
pkg:bitnami/phplist
Range: < 3.5.4

Patches

Vulnerability mechanics

References

blog.telspace.co.za/2020/07/phplist-cve-2020-15072-cve-2020-15073.htmlnvdExploitThird Party Advisory
discuss.phplist.org/t/phplist-3-5-5-has-been-released/6377nvdRelease NotesVendor Advisory
www.phplist.org/newslist/phplist-3-5-5-release-notes/nvdRelease NotesVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000