CVE-2010-2723: Cross-site scripting (XSS) vulnerability in LISTSERV 15 and 16 allows remote attackers to inject arbitrary...

Security readout for executives and security teams

This CVE describes a reported cross-site scripting issue in LISTSERV 15 and 16. An attacker could potentially inject script or HTML through the T parameter. The public record is thin and explicitly says the provenance is unknown, so urgency depends on confirming whether affected LISTSERV versions are present and exposed. Exposure is most plausible for organizations still operating LISTSERV 15 or 16 with web functionality reachable by users or the internet. The bundle does not identify CPEs, deployment prerequisites, or whether later versions are affected. Treat this as an exposure-confirmation task rather than an emergency unless affected, exposed LISTSERV systems are found. Because the record lacks severity, patch, and exploitation evidence, prioritize inventory and vendor confirmation before major response actions. Mitigation focus: Inventory LISTSERV deployments and confirm whether versions 15 or 16 are still in use.; Check LISTSERV vendor guidance or support channels for confirmed fixes or upgrade advice.; Prioritize vendor-supported upgrade or remediation once exposure is confirmed..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.