Medium severity6.1NVD Advisory· Published Jan 17, 2023· Updated Jun 17, 2026

CVE-2022-39195

Description

A cross-site scripting (XSS) vulnerability in the LISTSERV 17 web interface allows remote attackers to inject arbitrary JavaScript or HTML via the c parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Lsoft/Listserv2 versions
cpe:2.3:a:lsoft:listserv:17.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:lsoft:listserv:17.0:*:*:*:*:*:*:*
- (no CPE)range: 17
LISTSERV/LISTSERVdescription

Patches

Vulnerability mechanics

References

packetstormsecurity.com/2301-exploits/listserv17-xss.txtnvdThird Party AdvisoryVDB Entry
peach.ease.lsoft.com/scripts/wa-PEACH.exenvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.005
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000