CVE-2021-27911

Mautic versions before 3.3.4/4.0.0 are vulnerable to an inline JS XSS attack through the contact's first or last name and triggered when viewing a contact's details page then clicking on the action drop down and hovering over the Campaigns button. Contact first and last name can be populated from...

CVE-2021-27911 XSS vulnerability on contacts view

Mautic versions before 3.3.4/4.0.0 are vulnerable to an inline JS XSS attack through the contact's first or last name and triggered when viewing a contact's details page then clicking on the action drop down and hovering over the Campaigns button. Contact first and last name can be populated from...

CVE-2021-27911

CVE-2021-27911 affects Mautic before versions 3.3.4/4.0.0. An inline JavaScript XSS can be triggered on the contacts view when viewing a contact’s details page, opening the action dropdown, and hovering over the Campaigns button, with first/last names sourced from various inputs (UI, API, syncing...