Skip to content
OpenAdvisories
High · 7.3 CVE-2021-27917 EUVD-2024-2895GHSA-xpc5-rr39-v8v2

XSS in contact tracking and page hits report

Published Sep 18, 2024 · Updated Sep 19, 2024 · Assigned by Mautic

Vendor: Mautic Product: Mautic Package: mautic/core Package: mautic/core-lib Ecosystem: Packagist

Description

Prior to this patch, a stored XSS vulnerability existed in the contact tracking and page hits report.

Affected products

VendorProductAffectedFixed
Mautic Mautic >= 1.0.0-beta4 – < < 4.4.13, >= 5.0.0 – < < 5.1.1 < 4.4.13

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist mautic/core >= 1.0.0-beta4, < 4.4.13 4.4.13 GHSA-xpc5-rr39-v8v2
Packagist mautic/core >= 5.0.0-alpha, < 5.1.1 5.1.1 GHSA-xpc5-rr39-v8v2
Packagist mautic/core-lib >= 1.0.0-beta4, < 4.4.13 4.4.13 GHSA-xpc5-rr39-v8v2
Packagist mautic/core-lib >= 5.0.0-alpha, < 5.1.1 5.1.1 GHSA-xpc5-rr39-v8v2

References