XSS vulnerability in theme config file in Mautic

MEDIO 6.1CVE-2018-8071 · GHSA-5w74-jx7m-x6hv · Published 18/04/2018 · updated 17/06/2026

En resumen

CVE-2018-8071 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a mautic/core, mautic (mautic).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.81%, mayor que el 56.9% de las vulnerabilidades.
Solución: actualizar a 2.13.0 o posterior.

Package	Affected versions	Patched versions
mautic/core Packagist	`< 2.13.0`	`2.13.0`
mautic mautic	`< 2.13.0`	`2.13.0`

Mautic before v2.13.0 has stored XSS via a theme config file.

Update to 2.13.0 or later.

None.

If you have any questions or comments about this advisory:

NVD description

Mautic before v2.13.0 has stored XSS via a theme config file.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 2.13.0

2.13.0

< 2.13.0

2.13.0

Description

Mautic before v2.13.0 has stored XSS via a theme config file.

Update to 2.13.0 or later.

None.

If you have any questions or comments about this advisory:

NVD description

Mautic before v2.13.0 has stored XSS via a theme config file.

Más vulnerabilidades de mautic/core

Ver todo →