Lucene search
+L

1 matches found

OSV
OSV
added 2024/09/18 10:05 p.m.40 views

GHSA-73GR-32WG-QHH7 Mautic vulnerable to XSS in contact/company tracking (no authentication)

Summary Prior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable. Patches Please update to 4.4.13 or 5.1.1 or later. Workarounds None References https://owasp.org/www-project-top-ten/2017/A72017-Cross-SiteScriptingXSS...

5.4CVSS5.7AI score0.0029EPSS
SaveExploits0References5
Rows per page
Query Builder