CVE-2002-0388: GNU Mailman

High severity, CVSS 7.5. EPSS: 6.3% chance of exploitation in the next 30 days.

Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via (1) the admin login page, or (2) the Pipermail index summaries.

Affected products

• GNU Mailman: up to and including 2.0.11

Published 2002-06-18. Last modified 2026-06-16.