| Package | Affected versions | Patched versions |
|---|---|---|
| mautic/core | ≥ 1.0.0-beta2, < 4.4.12 | 4.4.12 |
| mautic | = 1.0.0≥ 1.0.0, < 4.4.12 | 4.4.12 |
Prior to the patched version, there is an XSS vulnerability in the description fields within the Mautic application which could be exploited by a logged in user of Mautic with the appropriate permissions.
This could lead to the user having elevated access to the system.
Update to 4.4.12
None
If you have any questions or comments about this advisory:
Email us at [email protected]
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free