CVE-2008-2923: Lyris List Manager

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in read/search/results in Lyris ListManager 8.8, 8.95, and 9.3d allows remote attackers to inject arbitrary web script or HTML via the words parameter.

Affected products

• Lyris List Manager: version 8.8 only; version 8.95 only; version 9.3d only

Published 2008-06-30. Last modified 2026-06-16.