Security PHPList 3.2.4 Cross Site Request Forgery / Cross Site Scripting June 1, 2016 007admin Leave a comment PHPList version 3.2.4 suffers from cross site request forgery and cross site scripting vulnerabilities.