https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T23:55:28.768173+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-92806 fkie_cve-2026-92806 2026-09-28T23:55:28.793820+00:00

phpList versions before 3.6.17 fail to validate cross-site request forgery tokens in the mass subscriber removal form handler. Attackers can induce logged-in administrators to visit crafted pages that silently delete and blacklist arbitrary subscriber addresses without authentication verification.

 https://db.gcve.eu/vuln/ghsa-q6pp-9mv4-x9xp GHSA-q6pp-9mv4-x9xp 2026-09-28T23:55:28.794027+00:00

phpList versions before 3.6.17 fail to validate cross-site request forgery tokens in the mass subscriber removal form handler. Attackers can induce logged-in administrators to visit crafted pages that silently delete and blacklist arbitrary subscriber addresses without authentication verification.