Design/Logic Flaw

An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json...