Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-70086
HistorySep 01, 2021 - 12:00 a.m.

Mautic Code Injection Vulnerability

2021-09-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
mautic
code injection
vulnerability
marketing automation
xss
attack
js
contact details

EPSS

0.001

Percentile

33.8%

Mautic is an open source marketing automation software that monitors and manages websites, sends emails and manages customer resources. Mautic is vulnerable to a code injection vulnerability that stems from Mautic’s vulnerability to JS XSS attacks. The attack is triggered when viewing a contact’s details page and then clicking on the action drop-down menu and hovering over the active button. No details of the vulnerability are currently available.

EPSS

0.001

Percentile

33.8%