Launchpad.net

CVE 2020-12108

/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.

See the CVE page on Mitre.org for more details.