Lucene search
MauticCVELIST:CVE-2021-27914HistoryJun 01, 2022 - 3:20 p.m.
CVE-2021-27914
2022-06-0115:20:10
CWE-79
Mautic
www.cve.org
1
7.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
6.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
23.0%
A cross-site scripting (XSS) vulnerability in the installer component of Mautic before 4.3.0 allows admins to inject executable javascript
CNA Affected
[
{
"product": "Mautic",
"vendor": "Mautic",
"versions": [
{
"lessThan": "4.3.0",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
cnvd
cnvd
Mautic Cross-Site Scripting Vulnerability (CNVD-2022-66676)
2022-06-02 00:00:00
osv
osv
CVE-2021-27914
2022-06-01 16:15:07
nvd
nvd
CVE-2021-27914
2022-06-01 16:15:07
cve
cve
CVE-2021-27914
2022-06-01 16:15:07
veracode
veracode
Cross-site Scripting (XSS)
2022-06-02 03:52:36
prion
prion
Cross site scripting
2022-06-01 16:15:00
7.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
6.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
23.0%
Related for CVELIST:CVE-2021-27914