description: Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
problem types: Cross-site scripting
affected:
{
product: Mailman
vendor: GNU Mailman
versions:
status: affected, version: 2.1.26 and earlier
}