phpList 3.5.3 allows type juggling for login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters.
{ "severity": "Critical", "cpes": [ "cpe:2.3:a:phplist:phplist:3.5.3:*:*:*:*:*:*:*" ] }