Developers of Sympa

[<address@concealed>]

I've been helping to evaluate Sympa for my university, and I noticed that
there's an unpatched cross-site scripting vulnerability that was posted to
bugtraq in 2004.
http://marc.info/?l=bugtraq&m=109312475207604&w=2
http://secunia.com/advisories/12339

That posting references a Sympa bug, but I couldn't find it in the current
Sympa bug tracker.  I verified that it does still exist in 5.2.4.

We're concernced about this, because we don't necessarily fully trust all our
list administrators.  Are there any plans to address this issue, or is there a
workaround?

Nathan Rogers