GHSA-9hx7-rg7w-xm79

ghsaUSosv

XSS vulnerability in company name field in Mautic

view advisory published 2021-01-19Licence: CC-BY-4.0

### Impact Mautic version 2.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Company's name that can result in denial of service and execution of javascript code. ### Patches Update to 2.14.0 or later. ### Workarounds None. ### For more information If you have any questions or comments about this advisory: * Email us at [security@mautic.org](mailto:security@mautic.org)

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2018-11200US	medium6.1	0.83% (57th)	—	2019-09-20
An issue was discovered in Mautic 2.13.1. It has Stored XSS via the company name field.

references

External citations — patches, advisories, analysis.

https://github.com/mautic/mautic/releases/tag/2.14.0WEB
https://github.com/mautic/mautic/security/advisories/GHSA-9hx7-rg7w-xm79WEB
https://nvd.nist.gov/vuln/detail/CVE-2018-11200ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan