medium6.1Public exploit code
CVE-2019-15501
Reflected cross site scripting (XSS) in L-Soft LISTSERV before 16.5-2018a exists via the /scripts/wa.exe OK parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- LSoft ListServ < 16.5-2018a - Cross-Site Scripting2019-08-26 · webapps · windows
Impact
Reflected cross site scripting (XSS) in L-Soft LISTSERV before 16.5-2018a exists via the /scripts/wa.exe OK parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lsoft | Listserv | before 16.5-2018a |