Description
Prior to the patched version, logged in users of Mautic are vulnerable to a self XSS vulnerability in the notifications within Mautic.
Users could inject malicious code into the notification when saving Dashboards.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mautic | Mautic | < 4.4.12 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | mautic/core | < 4.4.12 | 4.4.12 | GHSA-fhcx-f7jg-jx3f |