4.3
CVSSv2

CVE-2011-5024

Published: 29/12/2011 Updated: 14/02/2024
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in mmsearch/design in the Mailman/htdig integration patch for Mailman allows remote malicious users to inject arbitrary web script or HTML via the config parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

gnu mailman 2.1.3

gnu mailman 2.1.8

gnu mailman 2.1.11

gnu mailman 2.1.2

gnu mailman 2.1.9

gnu mailman 2.0.13

gnu mailman 2.1.6

gnu mailman 2.1

gnu mailman 2.1.10

gnu mailman 2.1.1

gnu mailman 2.1.12

gnu mailman 2.1.7

gnu mailman 2.1.4