XSS vulnerability in theme config file in Mautic

2021-01-1921:16:17

Google

osv.dev

0.001 Low

EPSS

Percentile

34.4%

JSON

Impact

Mautic before v2.13.0 has stored XSS via a theme config file.

Patches

Update to 2.13.0 or later.

Workarounds

None.

For more information

If you have any questions or comments about this advisory:

Email us at [email protected]

CPENameOperatorVersion
mautic/coreeq2.12.1
mautic/coreeq2.5.1
mautic/coreeq1.3.1
mautic/coreeq1.0.0-beta3
mautic/coreeq2.11.0
mautic/coreeq1.4.1
mautic/coreeq1.1.0
mautic/coreeq1.2.0
mautic/coreeq2.3.0
mautic/coreeq1.0.0-beta2

Name	Operator	Version
mautic/core	eq	2.12.1
mautic/core	eq	2.5.1
mautic/core	eq	1.3.1
mautic/core	eq	1.0.0-beta3
mautic/core	eq	2.11.0
mautic/core	eq	1.4.1
mautic/core	eq	1.1.0
mautic/core	eq	1.2.0
mautic/core	eq	2.3.0
mautic/core	eq	1.0.0-beta2