CVE-2022-39195
MEDIUM NUCLEILsoft Listserv - XSS
Title source: ruleDescription
A cross-site scripting (XSS) vulnerability in the LISTSERV 17 web interface allows remote attackers to inject arbitrary JavaScript or HTML via the c parameter.
Exploits (1)
exploitdb
WORKING POC
by Shaunt Der-Grigorian · textwebappscgi
https://www.exploit-db.com/exploits/51148
Nuclei Templates (1)
LISTSERV 17 - Cross-Site Scripting
MEDIUMVERIFIEDby arafatansari
Shodan:
http.html:"LISTSERV" || http.html:"listserv"
FOFA:
body="listserv"
Scores
CVSS v3
6.1
EPSS
0.0997
EPSS Percentile
93.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (1)
lsoft/listserv
17.0
Published
Jan 17, 2023
Tracked Since
Feb 18, 2026