CVE-2021-43331

In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for XSS

published November 12, 2021

CVSS
—
EPSS
1%
Percentile
71.9
In the wild
Unconfirmed
What it is

In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for XSS.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01381 · 71.9th percentile
Published
2021-11-12T20:44Z
EPSS history
Timeline
  • 12 NOV 20:44Z
    In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for XSS
    cvelistv5