01 Record

CVE-2026-73481

phpList < 3.7.0-RC5 Cross-Site Request Forgery via Bounce Rules

MediumPUBLISHEDCNA: VulnCheck

Base score5.3 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

02 Description

phpList < 3.7.0-RC5 Cross-Site Request Forgery via Bounce Rules

Published: 2026-08-13 18:48Z23 HR AGO
Last updated: 2026-08-14 12:46Z5 HR AGO
Reserved: 2026-08-12
Assigning CNA: VulnCheck
Record state: PUBLISHED
Severity: Medium (CVSS 5.3)
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Weaknesses: CWE-352
SSVC decision: No CISA-ADP assessment
Data version: 5.2
Document digest: d8ede3a88571cf1c376a8b0d26c9bddcc1c8b4b2b0d83619a966cc61ec161e03

VendorProductVersionsPlatforms

phplistphplist30 to < 3.7.0-RC5—