CVE-2018-11198

An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json...

CVE-2018-11198

CVE-2018-11198 affects Mautic 2.13.1, introducing a stored XSS via the authorUrl field in config.json. The issue enables injection of arbitrary JavaScript that can execute in a victim’s browser when viewing affected content. Multiple connected sources confirm the vulnerability and point to the sa...