GitHub Advisoryadvisory · Packagist

GHSA-xcf7-cj8q-pcjm XSS vulnerability in Author URL of themes in Mautic

MEDIUM Published 2021-01-19 Modified 2023-09-11 Official page ↗
Aliases
CVE-2018-11198
Ecosystem
Packagist
Packages
mautic/core
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2021-01-19

Affected packages

• Packagist mautic/core: >= 2.13.1, < 2.14.0 → fixed in 2.14.0

Description

Impact An XSS vulnerability was discovered in Mautic 2.13.1 in the Author URL of themes. Patches Update to 2.14 or later Workarounds None References https://github.com/mautic/mautic/releases/tag/2.14.0 For more information If you have any questions or comments about this advisory: • Email us at [email protected]

Related

Alias · CVE (1)

  • CVE-2018-11198 An issue was discovered in Mautic 2.13.1. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References