← All advisories

Critical severity9.8NVD Advisory· Published Jan 26, 2021· Updated Jun 17, 2026

CVE-2021-3188

CVE-2021-3188

Description

phpList 3.6.0 allows CSV injection, related to the email parameter, and /lists/admin/ exports.

Affected products

4

Phplist/Phplist3 versions
cpe:2.3:a:phplist:phplist:3.6.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:phplist:phplist:3.6.0:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 3.6.0
osv-coords
pkg:bitnami/phplist
Range: >= 3.6.0, <= 3.6.0

Patches

Vulnerability mechanics

References

1

wehackmx.com/security-research/WeHackMX-2021-001/nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.