Lucene search

K
osvGoogleOSV:CVE-2021-27912
HistoryAug 30, 2021 - 4:15 p.m.

CVE-2021-27912

2021-08-3016:15:07
Google
osv.dev
1

0.001 Low

EPSS

Percentile

23.0%

Mautic versions before 3.3.4/4.0.0 are vulnerable to an inline JS XSS attack when viewing Mautic assets by utilizing inline JS in the title and adding a broken image URL as a remote asset. This can only be leveraged by an authenticated user with permission to create or edit assets.

0.001 Low

EPSS

Percentile

23.0%