CVE-2018-11198

2019-09-0621:15:11

Google

osv.dev

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.7%

JSON

An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json.

CPENameOperatorVersion
mauticeq1.1.3
mauticeq1.0.5
mauticeq2.7.1
mauticeq1.0.0-beta
mauticeq2.10.0
mauticeq1.0.0-beta3
mauticeq2.12.2
mauticeq1.4.0
mauticeq2.9.2
mauticeq2.1.0

Name	Operator	Version
mautic	eq	1.1.3
mautic	eq	1.0.5
mautic	eq	2.7.1
mautic	eq	1.0.0-beta
mautic	eq	2.10.0
mautic	eq	1.0.0-beta3
mautic	eq	2.12.2
mautic	eq	1.4.0
mautic	eq	2.9.2
mautic	eq	2.1.0

Rows per page:

1-10 of 581

References

github.com/mautic/mautic/releases

github.com/mautic/mautic/releases/tag/2.14.0