Developers of Sympa

[MDT Evans <address@concealed>]

Apologies. It should have been:

> I've found an unauthenticated HTML injection into Sympa 6.1.24 (maybe in
> other versions).
> 
> Can anyone advise on who we can report this to please. I don't really
> want to publicise it on this list or on the bug tracker.

Also, I have a patch for a possible workaround but would like to know if
there is a better approach.

Thanks,
Martin.

-- 
Dr MDT Evans - Head of Data Centre Services.