CVE-2017-20036: PHPList Bounce Rule Persistent cross site scriting

Published Jun 10, 2022

Updated

A vulnerability, which was classified as problematic, was found in PHPList 3.2.6. Affected is an unknown function of the file /lists/admin/ of the component Bounce Rule. The manipulation leads to cross site scripting (Persistent). It is possible to launch the attack remotely. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component.

Affected Software

1 affected component

PHPlist PHPList=3.2.6

Event History

Jun 10, 2022

CVE Published

via MITRE·09:30 AM

Data Sourced

via MITRE·09:30 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2017-20036?

CVE-2017-20036 is classified as a problematic vulnerability due to its potential for persistent cross-site scripting attacks.

How do I fix CVE-2017-20036?

To fix CVE-2017-20036, users should upgrade PHPList to the latest version that addresses this vulnerability.

What systems are affected by CVE-2017-20036?

CVE-2017-20036 specifically affects PHPList version 3.2.6.

What type of attack is associated with CVE-2017-20036?

CVE-2017-20036 is associated with persistent cross-site scripting (XSS) attacks.

Is CVE-2017-20036 remotely exploitable?

Yes, CVE-2017-20036 can be exploited remotely, making it a significant security concern.