CNNVD-202601-065 Information
Jan 02, 2026
cve
CNNVD ID
CNNVD-202601-065
Related CVE
- CNNVD Published: 2026-01-02
Description (Chinese)
listmonk是Kailash Nadh个人开发者的一个具有现代仪表板的高性能、自托管、时事通讯和邮件列表管理器。 listmonk 6.0.0之前版本存在跨站脚本漏洞，该漏洞源于低权限用户可注入恶意JavaScript，可能导致权限提升。
Description (English)
Listmonk is a high-performance, self-custody, current communications and mailing list manager with modern dashboards for Kailash Nadh personal developers. The previous version of listmonk 6.0.0 had a cross-site script loophole, which stemmed from the fact that low-permit users could inject malicious JavaScript, which could lead to increased privileges.
Hazard Level
High
Vulnerability Type
跨站脚本
Affected Vendor
个人开发者
Published
2026-01-02
Last Modified
2026-02-24
References
https://github.com/knadh/listmonk/security/advisories/GHSA-jmr4-p576-v565 https://access.redhat.com/security/cve/cve-2026-21483
Patch
https://github.com/knadh/listmonk/releases
Share on: