GitHub Advisoryadvisory · Packagist

GHSA-5w74-jx7m-x6hv XSS vulnerability in theme config file in Mautic

MEDIUM Published 2021-01-19 Modified 2023-09-11 Official page ↗
Aliases
CVE-2018-8071
Ecosystem
Packagist
Packages
mautic/core
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2021-01-19

Affected packages

• Packagist mautic/core: < 2.13.0 → fixed in 2.13.0

Description

Impact Mautic before v2.13.0 has stored XSS via a theme config file. Patches Update to 2.13.0 or later. Workarounds None. For more information If you have any questions or comments about this advisory: • Email us at [email protected]

Related

Alias · CVE (1)

  • CVE-2018-8071 Mautic before v2.13.0 has stored XSS via a theme config file. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References