CVE-2012-2741

Cross-site scripting (XSS) vulnerability in public_html/lists/admin/ in phpList before 2.10.18 allows remote attackers to inject arbitrary web script or HTML via the num parameter in a reconcileusers action.

Date published : 2012-09-06

http://www.securityfocus.com/bid/52657

https://www.phplist.com/?lid=567