Vulnerabilities > Phplist > Critical

DATE CVE VULNERABILITY TITLE RISK
2021-01-26 CVE-2021-3188 Improper Neutralization of Formula Elements in a CSV File vulnerability in PHPlist 3.6.0
phpList 3.6.0 allows CSV injection, related to the email parameter, and /lists/admin/ exports.
network
low complexity
phplist CWE-1236
critical
10.0