Security Advisory
CVE-2021-43331
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for XSS.