Description
Prior to the patched version, there is an XSS vulnerability in the description fields within the Mautic application which could be exploited by a logged in user of Mautic with the appropriate permissions.
This could lead to the user having elevated access to the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mautic | Mautic | >= 1.0.0-beta2 – ≤ <= 4.4.11 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | mautic/core | >= 1.0.0-beta2, < 4.4.12 | 4.4.12 | GHSA-2rc5-2755-v422 |