XSS vulnerability in theme config file in Mautic

Description

References

• mautic/mautic security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2018-8071 · ADVISORY
• mautic/mautic commit 3add236 · WEB
• mautic/mautic release 2.13.0 · WEB

Mais vulnerabilidades de mautic/core

• CVE-2026-9811MÉDIO 5.4A stored Cross-Site Scripting (XSS) vulnerability exists in the project selector component of Mautic 7. When rendering selection menus for a…
• CVE-2026-9809ALTO 7.6A stored Cross-Site Scripting (XSS) vulnerability exists in the Projects component of Mautic 7. When displaying project tags and popovers on…
• CVE-2026-9808ALTO 7.1An authorization bypass vulnerability exists in the Mautic 7 API v2 endpoints (utilizing API Platform). Under certain conditions, roles conf…
• CVE-2026-9559CRÍTICO 9.9A path traversal vulnerability exists in the campaign import feature of Mautic 7. When extracting uploaded ZIP files during campaign imports…
• CVE-2026-9558CRÍTICO 9.9A Server-Side Template Injection (SSTI) vulnerability exists in Mautic's theme engine. The platform renders uploaded Twig templates without …