CVE-2018-11198

MEDIUM6.1EPSS 0.24%

XSS vulnerability in Author URL of themes in Mautic

Published: 1/19/2021Modified: 2/16/2024

Description

### Impact An XSS vulnerability was discovered in Mautic 2.13.1 in the Author URL of themes. ### Patches Update to 2.14 or later ### Workarounds None ### References https://github.com/mautic/mautic/releases/tag/2.14.0 ### For more information If you have any questions or comments about this advisory: * Email us at [[email protected]](mailto:[email protected])

Affected packages (1)

Packagist/mautic/core>= 2.13.1, < 2.14.0

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	MEDIUM6.1	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References (4)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2018-11198
WEBhttps://github.com/mautic/mautic/releases
WEBhttps://github.com/mautic/mautic/releases/tag/2.14.0
WEBhttps://github.com/mautic/mautic/security/advisories/GHSA-xcf7-cj8q-pcjm