CVE-2010-3089: GNU Mailman

Low severity, CVSS 3.5. EPSS: 2% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving (1) the list information field or (2) the list description field.

Affected products

• GNU Mailman: up to and including 2.1.13; version 2.1 only; version 2.1.1 only; version 2.1.2 only; version 2.1.3 only; version 2.1.4 only; …

Published 2010-09-15. Last modified 2026-06-16.