Secunia

Joxean Koret has reported a vulnerability in Sympa, which can be exploited by malicious, authenticated users to conduct script insertion attacks.

Input passed to the "description" field is not sanitised before being included in the profile for a mailing list. This can be exploited to execute arbitrary script code in a user's browser session in context of an affected site when a malicious mailing list profile is viewed.

The vulnerability has been reported in version 4.1.x and prior.

Solution
Grant only trusted users access to the system.

Provided and/or discovered by
Joxean Koret

Changelog
Further details available in Customer Area

Original Advisory
http://listes.cru.fr/mantis/view_bug_page.php?f_id=0000327

Deep Links
Links available in Customer Area