CVE-2011-5024

Mailman - Cross-Site Scripting via mmsearch/design config Parameter

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in mmsearch/design in the Mailman/htdig integration patch for Mailman allows remote attackers to inject arbitrary web script or HTML via the config parameter.

References (1)

Core 1
Core References
URL Repurposed x_refsource_misc
https://sitewat.ch/Advisory/View/3

Scores

EPSS 0.0038
EPSS Percentile 59.6%

Details

CWE
CWE-79
Status published
Products (13)
gnu/mailman 2.0.13
gnu/mailman 2.1
gnu/mailman 2.1.1
gnu/mailman 2.1.2
gnu/mailman 2.1.3
gnu/mailman 2.1.4
gnu/mailman 2.1.6
gnu/mailman 2.1.7
gnu/mailman 2.1.8
gnu/mailman 2.1.9
... and 3 more
Published Dec 29, 2011
Tracked Since Feb 18, 2026