CVE-2018-11200

Description

### Impact Mautic version 2.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Company's name that can result in denial of service and execution of javascript code. ### Patches Update to 2.14.0 or later. ### Workarounds None. ### For more information If you have any questions or comments about this advisory: * Email us at [[email protected]](mailto:[email protected])

Affected packages (1)

• Packagist/mautic/corefrom 0, < 2.14.0

CVSS scores

References (3)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2018-11200
• WEBhttps://github.com/mautic/mautic/releases/tag/2.14.0
• WEBhttps://github.com/mautic/mautic/security/advisories/GHSA-9hx7-rg7w-xm79