In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for XSS.
No PoCs from references.
- https://github.com/ARPSyndicate/cvemon