GitHub Advisoryadvisory · Packagist

GHSA-9hx7-rg7w-xm79 XSS vulnerability in company name field in Mautic

MEDIUM Published 2021-01-19 Modified 2021-01-19 Official page ↗
Aliases
CVE-2018-11200
Ecosystem
Packagist
Packages
mautic/core
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2021-01-19

Affected packages

• Packagist mautic/core: < 2.14.0 → fixed in 2.14.0

Description

Impact Mautic version 2.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Company's name that can result in denial of service and execution of javascript code. Patches Update to 2.14.0 or later. Workarounds None. For more information If you have any questions or comments about this advisory: • Email us at [email protected]

Related

Alias · CVE (1)

  • CVE-2018-11200 An issue was discovered in Mautic 2.13.1. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References