Description
A cross-site scripting (XSS) vulnerability in the installer component of Mautic before 4.3.0 allows admins to inject executable javascript
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mautic | Mautic | unspecified – < 4.3.0 | 4.3.0 |
High · 7.6
CVE-2021-27914
EUVD-2021-14640
A cross-site scripting (XSS) vulnerability in the installer component of Mautic before 4.3.0 allows admins to inject executable javascript
Published Jun 1, 2022 · Updated Aug 3, 2024 · Assigned by Mautic