Description
An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | mautic/core | >= 2.13.1, < 2.14.0 | 2.14.0 | GHSA-xcf7-cj8q-pcjm |
Medium · 6.1
CVE-2018-11198
EUVD-2021-0523GHSA-xcf7-cj8q-pcjm
XSS vulnerability in Author URL of themes in Mautic
Published Sep 6, 2019 · Updated Aug 5, 2024 · Assigned by mitre