Cross-site Scripting (XSS)

🗓️ 22 Sep 2024 14:39:31Reported by Veracode Vulnerability DatabaseType

Mautic is vulnerable to Cross-Site Scripting that allows attackers to steal user information.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-47058	19 Sep 202400:16	–	circl
CNNVD	Mautic 安全漏洞	18 Sep 202400:00	–	cnnvd
CVE	CVE-2024-47058	18 Sep 202421:00	–	cve
Cvelist	CVE-2024-47058 Cross-site Scripting (XSS) - stored (edit form HTML field)	18 Sep 202421:00	–	cvelist
EUVD	EUVD-2024-2896	3 Oct 202520:07	–	euvd
Github Security Blog	Mautic vulnerable to Cross-site Scripting (XSS) - stored (edit form HTML field)	18 Sep 202422:05	–	github
NVD	CVE-2024-47058	18 Sep 202421:15	–	nvd
OSV	GHSA-XV68-RRMW-9XWF Mautic vulnerable to Cross-site Scripting (XSS) - stored (edit form HTML field)	18 Sep 202422:05	–	osv
Snyk	Cross-site Scripting (XSS)	18 Sep 202422:05	–	snyk
Snyk	Cross-site Scripting (XSS)	18 Sep 202422:05	–	snyk

Vulners

Node

core-lib mautic/core-libRange5.0.0-alpha–5.1.0php

core-lib mautic/core-libRange3.x-dev–4.4.12php

core mautic/coreRange1.0.0-beta–4.4.12php

core mautic/coreRange5.0.0-alpha–5.1.0php

Source	Link
owasp	www.owasp.org/www-project-top-ten/2017/A7_2017-Cross-Site_Scripting_(XSS)
github	www.github.com/mautic/mautic/commit/88153a15b3cea331b7036d956b880c69e81a0032
owasp	www.owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/07-Input_Validation_Testing/02-Testing_for_Stored_Cross_Site_Scripting
github	www.github.com/mautic/mautic/commit/344b908ef690283e7d8d3fc5cc1327396a1c3046
github	www.github.com/advisories/GHSA-xv68-rrmw-9xwf
github	www.github.com/mautic/mautic/security/advisories/GHSA-xv68-rrmw-9xwf

30 Sep 2024 04:09Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.12.9 - 4.8

EPSS0.00186

SSVC