Description
Prior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mautic | Mautic | >= 2.6.0 – < < 4.4.13, > 5.0.0 – < < 5.1.1 | < 4.4.13 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | mautic/core | >= 2.6.0, < 4.4.13 | 4.4.13 | GHSA-73gr-32wg-qhh7 |
| Packagist | mautic/core | >= 5.0.0-alpha, < 5.1.1 | 5.1.1 | GHSA-73gr-32wg-qhh7 |
| Packagist | mautic/core-lib | >= 2.6.0, < 4.4.13 | 4.4.13 | GHSA-73gr-32wg-qhh7 |
| Packagist | mautic/core-lib | >= 5.0.0-alpha, < 5.1.1 | 5.1.1 | GHSA-73gr-32wg-qhh7 |