Developers of Sympa

[MDT Evans <address@concealed>]

Dear David,

Soory for contacting you directly, but we found your name at the bottom
of the Sympa Security advisories page.

I've found an unauthenticated HTML injection into Sympa 6.1.24 (maybe in
other versions).

Can anyone advise on who we can report this to please. I don't really
want to publicise it on this list or on the bug tracker.

Kind regards,
Martin.

-- 
Dr MDT Evans - Head of Data Centre Services.
Queen Mary University of London